@warlock.js/core 5.28.0 → 5.30.0

package/esm/generations/features/shared/merge-web-sitemap-config.mjs

@@ -1,6 +1,6 @@
 import ts from "typescript";
 
-//#region ../core/src/generations/features/shared/merge-web-sitemap-config.ts
+//#region ../../packages/core/src/generations/features/shared/merge-web-sitemap-config.ts
 /**
 * Merge a disabled `sitemap` section into `src/config/web.ts` SOURCE TEXT.
 *

package/esm/generations/features/shared/merge-web-sitemap-config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"merge-web-sitemap-config.mjs","names":[],"sources":["../../../../../../../../../core/src/generations/features/shared/merge-web-sitemap-config.ts"],"sourcesContent":["import ts from \"typescript\";\n\n/** What {@link mergeWebSitemapConfig} did, or could not do, to the source it was given. */\nexport type WebSitemapMergeResult =\n  { status: \"merged\"; next: string } | { status: \"already-present\" } | { status: \"unrecognised\" };\n\n/**\n * Merge a disabled `sitemap` section into `src/config/web.ts` SOURCE TEXT.\n *\n * **String surgery, never parse-and-print** — same rationale as\n * `insertConnectorEntry`: `web.ts` is app-owned and may carry any formatting\n * or comments a parse-and-print would discard. The TypeScript AST is used to\n * *find where to cut*, never to regenerate the file — the splice below still\n * copies the original source's bytes verbatim.\n *\n * Recognises the exported config object two ways: an inline `export default\n * {...}`, or `export default <identifier>;` pointing back at a `const\n * <identifier> = {...}` (or `const <identifier>: SomeType = {...}`) declared\n * earlier in the file — the shape this generator itself scaffolds, and the\n * shape every other generated config file in this project uses. Any other\n * shape (a function call, a re-export, no default export at all) returns\n * `\"unrecognised\"` rather than guessing at where to cut — clobbering an\n * app-owned file the merge could not actually understand is worse than\n * refusing.\n *\n * A `sitemap` property already present anywhere in the source (by key, so one\n * a human has since hand-edited is still found) is left unchanged — that is\n * what makes a second `warlock add sitemap` a no-op instead of a duplicate\n * block. Detection walks the AST rather than regex-matching `sitemap\\s*:`, so\n * a comment like `// sitemap: TODO` — text, not a property — does not count.\n *\n * Before returning a merge, the resulting text is re-parsed and checked for\n * syntax errors; a merge that would not itself parse is refused (as\n * `\"unrecognised\"`) instead of written, since a matched-but-corrupt splice is\n * worse than doing nothing.\n *\n * @param source The config file's current text.\n * @returns What happened, and the new text when there is any.\n */\nexport function mergeWebSitemapConfig(source: string): WebSitemapMergeResult {\n  const sourceFile = ts.createSourceFile(\n    \"web.ts\",\n    source,\n    ts.ScriptTarget.ESNext,\n    /* setParentNodes */ true,\n    ts.ScriptKind.TS,\n  );\n\n  const objectLiteral = findExportedConfigObjectLiteral(sourceFile);\n\n  if (!objectLiteral) {\n    return { status: \"unrecognised\" };\n  }\n\n  if (hasTopLevelSitemapProperty(objectLiteral)) {\n    return { status: \"already-present\" };\n  }\n\n  const bodyStart = objectLiteral.getStart(sourceFile) + 1;\n  const closingBraceIndex = objectLiteral.getEnd() - 1;\n  const body = source.slice(bodyStart, closingBraceIndex);\n\n  const indentMatch = /\\n([ \\t]*)\\S/.exec(body);\n  const indent = indentMatch ? indentMatch[1] : \"  \";\n\n  const block =\n    `${indent}sitemap: {\\n` +\n    `${indent}${indent}enabled: false,\\n` +\n    `${indent}${indent}path: \"/sitemap.xml\",\\n` +\n    `${indent}${indent}defaults: { changefreq: \"weekly\", priority: 0.5 },\\n` +\n    `${indent}},\\n`;\n\n  const { index: insertionPoint, needsComma } = lastPropertyEnd(source, closingBraceIndex);\n\n  const next =\n    `${source.slice(0, insertionPoint)}` +\n    `${needsComma ? \",\\n\" : \"\"}` +\n    `${block}` +\n    `${source.slice(closingBraceIndex)}`;\n\n  if (hasSyntaxErrors(next)) {\n    return { status: \"unrecognised\" };\n  }\n\n  return { status: \"merged\", next };\n}\n\n/** Whether TEXT fails to parse as TypeScript source. */\nfunction hasSyntaxErrors(text: string): boolean {\n  const { diagnostics } = ts.transpileModule(text, {\n    compilerOptions: { module: ts.ModuleKind.ESNext, target: ts.ScriptTarget.ESNext },\n    reportDiagnostics: true,\n  });\n\n  return Boolean(diagnostics && diagnostics.length > 0);\n}\n\n/**\n * Whether the exported config object literal already has a `sitemap`\n * property directly on it — a `sitemap` key nested under some other\n * property (e.g. `seo: { sitemap: true }`) is a different feature's field\n * and must not block adding the top-level one.\n */\nfunction hasTopLevelSitemapProperty(objectLiteral: ts.ObjectLiteralExpression): boolean {\n  return objectLiteral.properties.some(\n    (property) =>\n      (ts.isPropertyAssignment(property) || ts.isShorthandPropertyAssignment(property)) &&\n      propertyKeyName(property.name) === \"sitemap\",\n  );\n}\n\n/** The literal text of a property name node, when it is one of the plain shapes we care about. */\nfunction propertyKeyName(name: ts.PropertyName): string | undefined {\n  if (ts.isIdentifier(name) || ts.isStringLiteral(name) || ts.isNumericLiteral(name)) {\n    return name.text;\n  }\n\n  return undefined;\n}\n\n/**\n * Find the object literal a source file's default export ultimately points\n * at, whether the export is inline or an identifier declared earlier in the\n * file.\n */\nfunction findExportedConfigObjectLiteral(\n  sourceFile: ts.SourceFile,\n): ts.ObjectLiteralExpression | undefined {\n  const exportAssignment = sourceFile.statements.find(\n    (statement): statement is ts.ExportAssignment =>\n      ts.isExportAssignment(statement) && !statement.isExportEquals,\n  );\n\n  if (!exportAssignment) return undefined;\n\n  const { expression } = exportAssignment;\n\n  if (ts.isObjectLiteralExpression(expression)) {\n    return expression;\n  }\n\n  if (!ts.isIdentifier(expression)) return undefined;\n\n  const identifier = expression.text;\n\n  for (const statement of sourceFile.statements) {\n    if (!ts.isVariableStatement(statement)) continue;\n\n    for (const declaration of statement.declarationList.declarations) {\n      if (\n        ts.isIdentifier(declaration.name) &&\n        declaration.name.text === identifier &&\n        declaration.initializer &&\n        ts.isObjectLiteralExpression(declaration.initializer)\n      ) {\n        return declaration.initializer;\n      }\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Where to insert a new property right before a closing brace, and whether\n * the property immediately before it (if any) needs a trailing comma added —\n * an object literal with two properties and no comma between them does not\n * parse.\n */\nfunction lastPropertyEnd(\n  source: string,\n  closingBraceIndex: number,\n): { index: number; needsComma: boolean } {\n  let cursor = closingBraceIndex - 1;\n\n  while (cursor >= 0 && /\\s/.test(source.charAt(cursor))) {\n    cursor--;\n  }\n\n  if (cursor < 0 || source[cursor] === \"{\" || source[cursor] === \",\") {\n    return { index: closingBraceIndex, needsComma: false };\n  }\n\n  return { index: cursor + 1, needsComma: true };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,SAAgB,sBAAsB,QAAuC;CAC3E,MAAM,aAAa,GAAG,iBACpB,UACA,QACA,GAAG,aAAa,QACK,MACrB,GAAG,WAAW,EAChB;CAEA,MAAM,gBAAgB,gCAAgC,UAAU;CAEhE,IAAI,CAAC,eACH,OAAO,EAAE,QAAQ,eAAe;CAGlC,IAAI,2BAA2B,aAAa,GAC1C,OAAO,EAAE,QAAQ,kBAAkB;CAGrC,MAAM,YAAY,cAAc,SAAS,UAAU,IAAI;CACvD,MAAM,oBAAoB,cAAc,OAAO,IAAI;CACnD,MAAM,OAAO,OAAO,MAAM,WAAW,iBAAiB;CAEtD,MAAM,cAAc,eAAe,KAAK,IAAI;CAC5C,MAAM,SAAS,cAAc,YAAY,KAAK;CAE9C,MAAM,QACJ,GAAG,OAAO,cACP,SAAS,OAAO,mBAChB,SAAS,OAAO,yBAChB,SAAS,OAAO,sDAChB,OAAO;CAEZ,MAAM,EAAE,OAAO,gBAAgB,eAAe,gBAAgB,QAAQ,iBAAiB;CAEvF,MAAM,OACJ,GAAG,OAAO,MAAM,GAAG,cAAc,IAC9B,aAAa,QAAQ,KACrB,QACA,OAAO,MAAM,iBAAiB;CAEnC,IAAI,gBAAgB,IAAI,GACtB,OAAO,EAAE,QAAQ,eAAe;CAGlC,OAAO;EAAE,QAAQ;EAAU;CAAK;AAClC;;AAGA,SAAS,gBAAgB,MAAuB;CAC9C,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,MAAM;EAC/C,iBAAiB;GAAE,QAAQ,GAAG,WAAW;GAAQ,QAAQ,GAAG,aAAa;EAAO;EAChF,mBAAmB;CACrB,CAAC;CAED,OAAO,QAAQ,eAAe,YAAY,SAAS,CAAC;AACtD;;;;;;;AAQA,SAAS,2BAA2B,eAAoD;CACtF,OAAO,cAAc,WAAW,MAC7B,cACE,GAAG,qBAAqB,QAAQ,KAAK,GAAG,8BAA8B,QAAQ,MAC/E,gBAAgB,SAAS,IAAI,MAAM,SACvC;AACF;;AAGA,SAAS,gBAAgB,MAA2C;CAClE,IAAI,GAAG,aAAa,IAAI,KAAK,GAAG,gBAAgB,IAAI,KAAK,GAAG,iBAAiB,IAAI,GAC/E,OAAO,KAAK;AAIhB;;;;;;AAOA,SAAS,gCACP,YACwC;CACxC,MAAM,mBAAmB,WAAW,WAAW,MAC5C,cACC,GAAG,mBAAmB,SAAS,KAAK,CAAC,UAAU,cACnD;CAEA,IAAI,CAAC,kBAAkB,OAAO;CAE9B,MAAM,EAAE,eAAe;CAEvB,IAAI,GAAG,0BAA0B,UAAU,GACzC,OAAO;CAGT,IAAI,CAAC,GAAG,aAAa,UAAU,GAAG,OAAO;CAEzC,MAAM,aAAa,WAAW;CAE9B,KAAK,MAAM,aAAa,WAAW,YAAY;EAC7C,IAAI,CAAC,GAAG,oBAAoB,SAAS,GAAG;EAExC,KAAK,MAAM,eAAe,UAAU,gBAAgB,cAClD,IACE,GAAG,aAAa,YAAY,IAAI,KAChC,YAAY,KAAK,SAAS,cAC1B,YAAY,eACZ,GAAG,0BAA0B,YAAY,WAAW,GAEpD,OAAO,YAAY;CAGzB;AAGF;;;;;;;AAQA,SAAS,gBACP,QACA,mBACwC;CACxC,IAAI,SAAS,oBAAoB;CAEjC,OAAO,UAAU,KAAK,KAAK,KAAK,OAAO,OAAO,MAAM,CAAC,GACnD;CAGF,IAAI,SAAS,KAAK,OAAO,YAAY,OAAO,OAAO,YAAY,KAC7D,OAAO;EAAE,OAAO;EAAmB,YAAY;CAAM;CAGvD,OAAO;EAAE,OAAO,SAAS;EAAG,YAAY;CAAK;AAC/C"}
+{"version":3,"file":"merge-web-sitemap-config.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/generations/features/shared/merge-web-sitemap-config.ts"],"sourcesContent":["import ts from \"typescript\";\n\n/** What {@link mergeWebSitemapConfig} did, or could not do, to the source it was given. */\nexport type WebSitemapMergeResult =\n  { status: \"merged\"; next: string } | { status: \"already-present\" } | { status: \"unrecognised\" };\n\n/**\n * Merge a disabled `sitemap` section into `src/config/web.ts` SOURCE TEXT.\n *\n * **String surgery, never parse-and-print** — same rationale as\n * `insertConnectorEntry`: `web.ts` is app-owned and may carry any formatting\n * or comments a parse-and-print would discard. The TypeScript AST is used to\n * *find where to cut*, never to regenerate the file — the splice below still\n * copies the original source's bytes verbatim.\n *\n * Recognises the exported config object two ways: an inline `export default\n * {...}`, or `export default <identifier>;` pointing back at a `const\n * <identifier> = {...}` (or `const <identifier>: SomeType = {...}`) declared\n * earlier in the file — the shape this generator itself scaffolds, and the\n * shape every other generated config file in this project uses. Any other\n * shape (a function call, a re-export, no default export at all) returns\n * `\"unrecognised\"` rather than guessing at where to cut — clobbering an\n * app-owned file the merge could not actually understand is worse than\n * refusing.\n *\n * A `sitemap` property already present anywhere in the source (by key, so one\n * a human has since hand-edited is still found) is left unchanged — that is\n * what makes a second `warlock add sitemap` a no-op instead of a duplicate\n * block. Detection walks the AST rather than regex-matching `sitemap\\s*:`, so\n * a comment like `// sitemap: TODO` — text, not a property — does not count.\n *\n * Before returning a merge, the resulting text is re-parsed and checked for\n * syntax errors; a merge that would not itself parse is refused (as\n * `\"unrecognised\"`) instead of written, since a matched-but-corrupt splice is\n * worse than doing nothing.\n *\n * @param source The config file's current text.\n * @returns What happened, and the new text when there is any.\n */\nexport function mergeWebSitemapConfig(source: string): WebSitemapMergeResult {\n  const sourceFile = ts.createSourceFile(\n    \"web.ts\",\n    source,\n    ts.ScriptTarget.ESNext,\n    /* setParentNodes */ true,\n    ts.ScriptKind.TS,\n  );\n\n  const objectLiteral = findExportedConfigObjectLiteral(sourceFile);\n\n  if (!objectLiteral) {\n    return { status: \"unrecognised\" };\n  }\n\n  if (hasTopLevelSitemapProperty(objectLiteral)) {\n    return { status: \"already-present\" };\n  }\n\n  const bodyStart = objectLiteral.getStart(sourceFile) + 1;\n  const closingBraceIndex = objectLiteral.getEnd() - 1;\n  const body = source.slice(bodyStart, closingBraceIndex);\n\n  const indentMatch = /\\n([ \\t]*)\\S/.exec(body);\n  const indent = indentMatch ? indentMatch[1] : \"  \";\n\n  const block =\n    `${indent}sitemap: {\\n` +\n    `${indent}${indent}enabled: false,\\n` +\n    `${indent}${indent}path: \"/sitemap.xml\",\\n` +\n    `${indent}${indent}defaults: { changefreq: \"weekly\", priority: 0.5 },\\n` +\n    `${indent}},\\n`;\n\n  const { index: insertionPoint, needsComma } = lastPropertyEnd(source, closingBraceIndex);\n\n  const next =\n    `${source.slice(0, insertionPoint)}` +\n    `${needsComma ? \",\\n\" : \"\"}` +\n    `${block}` +\n    `${source.slice(closingBraceIndex)}`;\n\n  if (hasSyntaxErrors(next)) {\n    return { status: \"unrecognised\" };\n  }\n\n  return { status: \"merged\", next };\n}\n\n/** Whether TEXT fails to parse as TypeScript source. */\nfunction hasSyntaxErrors(text: string): boolean {\n  const { diagnostics } = ts.transpileModule(text, {\n    compilerOptions: { module: ts.ModuleKind.ESNext, target: ts.ScriptTarget.ESNext },\n    reportDiagnostics: true,\n  });\n\n  return Boolean(diagnostics && diagnostics.length > 0);\n}\n\n/**\n * Whether the exported config object literal already has a `sitemap`\n * property directly on it — a `sitemap` key nested under some other\n * property (e.g. `seo: { sitemap: true }`) is a different feature's field\n * and must not block adding the top-level one.\n */\nfunction hasTopLevelSitemapProperty(objectLiteral: ts.ObjectLiteralExpression): boolean {\n  return objectLiteral.properties.some(\n    (property) =>\n      (ts.isPropertyAssignment(property) || ts.isShorthandPropertyAssignment(property)) &&\n      propertyKeyName(property.name) === \"sitemap\",\n  );\n}\n\n/** The literal text of a property name node, when it is one of the plain shapes we care about. */\nfunction propertyKeyName(name: ts.PropertyName): string | undefined {\n  if (ts.isIdentifier(name) || ts.isStringLiteral(name) || ts.isNumericLiteral(name)) {\n    return name.text;\n  }\n\n  return undefined;\n}\n\n/**\n * Find the object literal a source file's default export ultimately points\n * at, whether the export is inline or an identifier declared earlier in the\n * file.\n */\nfunction findExportedConfigObjectLiteral(\n  sourceFile: ts.SourceFile,\n): ts.ObjectLiteralExpression | undefined {\n  const exportAssignment = sourceFile.statements.find(\n    (statement): statement is ts.ExportAssignment =>\n      ts.isExportAssignment(statement) && !statement.isExportEquals,\n  );\n\n  if (!exportAssignment) return undefined;\n\n  const { expression } = exportAssignment;\n\n  if (ts.isObjectLiteralExpression(expression)) {\n    return expression;\n  }\n\n  if (!ts.isIdentifier(expression)) return undefined;\n\n  const identifier = expression.text;\n\n  for (const statement of sourceFile.statements) {\n    if (!ts.isVariableStatement(statement)) continue;\n\n    for (const declaration of statement.declarationList.declarations) {\n      if (\n        ts.isIdentifier(declaration.name) &&\n        declaration.name.text === identifier &&\n        declaration.initializer &&\n        ts.isObjectLiteralExpression(declaration.initializer)\n      ) {\n        return declaration.initializer;\n      }\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Where to insert a new property right before a closing brace, and whether\n * the property immediately before it (if any) needs a trailing comma added —\n * an object literal with two properties and no comma between them does not\n * parse.\n */\nfunction lastPropertyEnd(\n  source: string,\n  closingBraceIndex: number,\n): { index: number; needsComma: boolean } {\n  let cursor = closingBraceIndex - 1;\n\n  while (cursor >= 0 && /\\s/.test(source.charAt(cursor))) {\n    cursor--;\n  }\n\n  if (cursor < 0 || source[cursor] === \"{\" || source[cursor] === \",\") {\n    return { index: closingBraceIndex, needsComma: false };\n  }\n\n  return { index: cursor + 1, needsComma: true };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,SAAgB,sBAAsB,QAAuC;CAC3E,MAAM,aAAa,GAAG,iBACpB,UACA,QACA,GAAG,aAAa,QACK,MACrB,GAAG,WAAW,EAChB;CAEA,MAAM,gBAAgB,gCAAgC,UAAU;CAEhE,IAAI,CAAC,eACH,OAAO,EAAE,QAAQ,eAAe;CAGlC,IAAI,2BAA2B,aAAa,GAC1C,OAAO,EAAE,QAAQ,kBAAkB;CAGrC,MAAM,YAAY,cAAc,SAAS,UAAU,IAAI;CACvD,MAAM,oBAAoB,cAAc,OAAO,IAAI;CACnD,MAAM,OAAO,OAAO,MAAM,WAAW,iBAAiB;CAEtD,MAAM,cAAc,eAAe,KAAK,IAAI;CAC5C,MAAM,SAAS,cAAc,YAAY,KAAK;CAE9C,MAAM,QACJ,GAAG,OAAO,cACP,SAAS,OAAO,mBAChB,SAAS,OAAO,yBAChB,SAAS,OAAO,sDAChB,OAAO;CAEZ,MAAM,EAAE,OAAO,gBAAgB,eAAe,gBAAgB,QAAQ,iBAAiB;CAEvF,MAAM,OACJ,GAAG,OAAO,MAAM,GAAG,cAAc,IAC9B,aAAa,QAAQ,KACrB,QACA,OAAO,MAAM,iBAAiB;CAEnC,IAAI,gBAAgB,IAAI,GACtB,OAAO,EAAE,QAAQ,eAAe;CAGlC,OAAO;EAAE,QAAQ;EAAU;CAAK;AAClC;;AAGA,SAAS,gBAAgB,MAAuB;CAC9C,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,MAAM;EAC/C,iBAAiB;GAAE,QAAQ,GAAG,WAAW;GAAQ,QAAQ,GAAG,aAAa;EAAO;EAChF,mBAAmB;CACrB,CAAC;CAED,OAAO,QAAQ,eAAe,YAAY,SAAS,CAAC;AACtD;;;;;;;AAQA,SAAS,2BAA2B,eAAoD;CACtF,OAAO,cAAc,WAAW,MAC7B,cACE,GAAG,qBAAqB,QAAQ,KAAK,GAAG,8BAA8B,QAAQ,MAC/E,gBAAgB,SAAS,IAAI,MAAM,SACvC;AACF;;AAGA,SAAS,gBAAgB,MAA2C;CAClE,IAAI,GAAG,aAAa,IAAI,KAAK,GAAG,gBAAgB,IAAI,KAAK,GAAG,iBAAiB,IAAI,GAC/E,OAAO,KAAK;AAIhB;;;;;;AAOA,SAAS,gCACP,YACwC;CACxC,MAAM,mBAAmB,WAAW,WAAW,MAC5C,cACC,GAAG,mBAAmB,SAAS,KAAK,CAAC,UAAU,cACnD;CAEA,IAAI,CAAC,kBAAkB,OAAO;CAE9B,MAAM,EAAE,eAAe;CAEvB,IAAI,GAAG,0BAA0B,UAAU,GACzC,OAAO;CAGT,IAAI,CAAC,GAAG,aAAa,UAAU,GAAG,OAAO;CAEzC,MAAM,aAAa,WAAW;CAE9B,KAAK,MAAM,aAAa,WAAW,YAAY;EAC7C,IAAI,CAAC,GAAG,oBAAoB,SAAS,GAAG;EAExC,KAAK,MAAM,eAAe,UAAU,gBAAgB,cAClD,IACE,GAAG,aAAa,YAAY,IAAI,KAChC,YAAY,KAAK,SAAS,cAC1B,YAAY,eACZ,GAAG,0BAA0B,YAAY,WAAW,GAEpD,OAAO,YAAY;CAGzB;AAGF;;;;;;;AAQA,SAAS,gBACP,QACA,mBACwC;CACxC,IAAI,SAAS,oBAAoB;CAEjC,OAAO,UAAU,KAAK,KAAK,KAAK,OAAO,OAAO,MAAM,CAAC,GACnD;CAGF,IAAI,SAAS,KAAK,OAAO,YAAY,OAAO,OAAO,YAAY,KAC7D,OAAO;EAAE,OAAO;EAAmB,YAAY;CAAM;CAGvD,OAAO;EAAE,OAAO,SAAS;EAAG,YAAY;CAAK;AAC/C"}

package/esm/generations/features/shared/migration-timestamp.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/generations/features/shared/migration-timestamp.ts
+//#region ../../packages/core/src/generations/features/shared/migration-timestamp.ts
 /**
 * Build a migration filename timestamp prefix in the framework's
 * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this

package/esm/generations/features/shared/migration-timestamp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"migration-timestamp.mjs","names":[],"sources":["../../../../../../../../../core/src/generations/features/shared/migration-timestamp.ts"],"sourcesContent":["/**\n * Build a migration filename timestamp prefix in the framework's\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\n * stamp sibling migrations created in the same scaffold a second apart so they\n * never collide and keep a stable relative order.\n */\nexport function migrationTimestamp(offsetSeconds = 0): string {\n  const now = new Date(Date.now() + offsetSeconds * 1000);\n  const pad = (value: number) => String(value).padStart(2, \"0\");\n\n  return (\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\n  );\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,mBAAmB,gBAAgB,GAAW;CAC5D,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E"}
+{"version":3,"file":"migration-timestamp.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/generations/features/shared/migration-timestamp.ts"],"sourcesContent":["/**\n * Build a migration filename timestamp prefix in the framework's\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\n * stamp sibling migrations created in the same scaffold a second apart so they\n * never collide and keep a stable relative order.\n */\nexport function migrationTimestamp(offsetSeconds = 0): string {\n  const now = new Date(Date.now() + offsetSeconds * 1000);\n  const pad = (value: number) => String(value).padStart(2, \"0\");\n\n  return (\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\n  );\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,mBAAmB,gBAAgB,GAAW;CAC5D,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E"}

package/esm/generations/features/shared/patch-tsconfig-include.mjs

@@ -3,7 +3,7 @@ import "../../../utils/index.mjs";
 import { colors } from "@mongez/copper";
 import { fileExistsAsync, getFileAsync, putFileAsync } from "@warlock.js/fs";
 
-//#region ../core/src/generations/features/shared/patch-tsconfig-include.ts
+//#region ../../packages/core/src/generations/features/shared/patch-tsconfig-include.ts
 /**
 * Insert one entry into the `include` array of a tsconfig's SOURCE TEXT.
 *

package/esm/generations/features/shared/patch-tsconfig-include.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"patch-tsconfig-include.mjs","names":[],"sources":["../../../../../../../../../core/src/generations/features/shared/patch-tsconfig-include.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport { rootPath } from \"../../../utils\";\n\n/** What {@link insertIncludeEntry} did, or could not do, to the source it was given. */\nexport type IncludeInsertion =\n  { status: \"added\"; next: string } | { status: \"already-present\" } | { status: \"unrecognised\" };\n\n/**\n * Insert one entry into the `include` array of a tsconfig's SOURCE TEXT.\n *\n * **String surgery, never parse-and-write.** The project template's\n * `tsconfig.json` carries `//` comments — it is JSONC, which TypeScript accepts\n * and `JSON.parse` rejects. A parse-first patch therefore throws on exactly the\n * projects a feature is generated into: `warlock add react-email` failed on\n * every freshly scaffolded app with\n *\n * ```\n * ✖ add <features...> failed\n * Expected double-quoted property name in JSON at position 454 (line 17 column 5)\n * ```\n *\n * where line 17 is the comment explaining the project's `moduleResolution`. And\n * even where a parse succeeded, writing the object back would silently delete\n * every comment in the file — comments that are load-bearing documentation\n * there.\n *\n * `shadcn.feature.ts`'s `addWebPathAlias` already reached this conclusion for\n * `compilerOptions.paths`; this is the same rule for `include`, kept in one\n * place so the next feature that needs it cannot get it wrong again.\n *\n * @param source The tsconfig file's current text.\n * @param entry The include entry to add, e.g. `\"emails\"`.\n * @returns What happened, and the new text when there is any.\n */\nexport function insertIncludeEntry(source: string, entry: string): IncludeInsertion {\n  // Matches the entry whichever quote style the file uses, so a re-run against a\n  // hand-edited tsconfig does not stack a second copy.\n  if (new RegExp(`[\"']${escapeForRegExp(entry)}[\"']`).test(source)) {\n    return { status: \"already-present\" };\n  }\n\n  const includeArray = /\"include\"\\s*:\\s*\\[/.exec(source);\n\n  if (!includeArray) {\n    return { status: \"unrecognised\" };\n  }\n\n  const insertAt = includeArray.index + includeArray[0].length;\n\n  return {\n    status: \"added\",\n    next: `${source.slice(0, insertAt)}${JSON.stringify(entry)}, ${source.slice(insertAt)}`,\n  };\n}\n\n/**\n * Add one entry to the project's `tsconfig.json` `include` array.\n *\n * Never throws. A tsconfig this cannot patch produces a printed instruction the\n * developer can follow by hand — a feature must not abort a whole `add` because\n * one optional convenience could not be applied.\n *\n * @param entry The include entry to add, e.g. `\"emails\"`.\n * @param reason One line explaining what breaks without it, printed when the\n *               patch has to be handed back to the developer.\n */\nexport async function patchTsconfigInclude(entry: string, reason: string): Promise<void> {\n  const tsconfigPath = rootPath(\"tsconfig.json\");\n\n  const printManualInstruction = (problem: string) => {\n    console.log(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(\"tsconfig.json\")} ${problem} — ` +\n        `add ${JSON.stringify(entry)} to its \\`include\\` array yourself.\\n  ${reason}`,\n    );\n  };\n\n  if (!(await fileExistsAsync(tsconfigPath))) {\n    printManualInstruction(\"not found\");\n\n    return;\n  }\n\n  const insertion = insertIncludeEntry(await getFileAsync(tsconfigPath), entry);\n\n  if (insertion.status === \"already-present\") {\n    return;\n  }\n\n  if (insertion.status === \"unrecognised\") {\n    printManualInstruction(\"has no recognisable `include` array\");\n\n    return;\n  }\n\n  await putFileAsync(tsconfigPath, insertion.next);\n  console.log(`${colors.green(\"✓\")} Added ${JSON.stringify(entry)} to tsconfig.json include`);\n}\n\n/**\n * Escape a literal string for embedding in a regular expression.\n *\n * @param value The literal to escape.\n * @returns The escaped literal.\n */\nfunction escapeForRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAgB,mBAAmB,QAAgB,OAAiC;CAGlF,IAAI,IAAI,OAAO,OAAO,gBAAgB,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,MAAM,GAC7D,OAAO,EAAE,QAAQ,kBAAkB;CAGrC,MAAM,eAAe,qBAAqB,KAAK,MAAM;CAErD,IAAI,CAAC,cACH,OAAO,EAAE,QAAQ,eAAe;CAGlC,MAAM,WAAW,aAAa,QAAQ,aAAa,EAAE,CAAC;CAEtD,OAAO;EACL,QAAQ;EACR,MAAM,GAAG,OAAO,MAAM,GAAG,QAAQ,IAAI,KAAK,UAAU,KAAK,EAAE,IAAI,OAAO,MAAM,QAAQ;CACtF;AACF;;;;;;;;;;;;AAaA,eAAsB,qBAAqB,OAAe,QAA+B;CACvF,MAAM,eAAe,SAAS,eAAe;CAE7C,MAAM,0BAA0B,YAAoB;EAClD,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,eAAe,EAAE,GAAG,QAAQ,SACtE,KAAK,UAAU,KAAK,EAAE,yCAAyC,QAC1E;CACF;CAEA,IAAI,CAAE,MAAM,gBAAgB,YAAY,GAAI;EAC1C,uBAAuB,WAAW;EAElC;CACF;CAEA,MAAM,YAAY,mBAAmB,MAAM,aAAa,YAAY,GAAG,KAAK;CAE5E,IAAI,UAAU,WAAW,mBACvB;CAGF,IAAI,UAAU,WAAW,gBAAgB;EACvC,uBAAuB,qCAAqC;EAE5D;CACF;CAEA,MAAM,aAAa,cAAc,UAAU,IAAI;CAC/C,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,SAAS,KAAK,UAAU,KAAK,EAAE,0BAA0B;AAC5F;;;;;;;AAQA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD"}
+{"version":3,"file":"patch-tsconfig-include.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/generations/features/shared/patch-tsconfig-include.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport { rootPath } from \"../../../utils\";\n\n/** What {@link insertIncludeEntry} did, or could not do, to the source it was given. */\nexport type IncludeInsertion =\n  { status: \"added\"; next: string } | { status: \"already-present\" } | { status: \"unrecognised\" };\n\n/**\n * Insert one entry into the `include` array of a tsconfig's SOURCE TEXT.\n *\n * **String surgery, never parse-and-write.** The project template's\n * `tsconfig.json` carries `//` comments — it is JSONC, which TypeScript accepts\n * and `JSON.parse` rejects. A parse-first patch therefore throws on exactly the\n * projects a feature is generated into: `warlock add react-email` failed on\n * every freshly scaffolded app with\n *\n * ```\n * ✖ add <features...> failed\n * Expected double-quoted property name in JSON at position 454 (line 17 column 5)\n * ```\n *\n * where line 17 is the comment explaining the project's `moduleResolution`. And\n * even where a parse succeeded, writing the object back would silently delete\n * every comment in the file — comments that are load-bearing documentation\n * there.\n *\n * `shadcn.feature.ts`'s `addWebPathAlias` already reached this conclusion for\n * `compilerOptions.paths`; this is the same rule for `include`, kept in one\n * place so the next feature that needs it cannot get it wrong again.\n *\n * @param source The tsconfig file's current text.\n * @param entry The include entry to add, e.g. `\"emails\"`.\n * @returns What happened, and the new text when there is any.\n */\nexport function insertIncludeEntry(source: string, entry: string): IncludeInsertion {\n  // Matches the entry whichever quote style the file uses, so a re-run against a\n  // hand-edited tsconfig does not stack a second copy.\n  if (new RegExp(`[\"']${escapeForRegExp(entry)}[\"']`).test(source)) {\n    return { status: \"already-present\" };\n  }\n\n  const includeArray = /\"include\"\\s*:\\s*\\[/.exec(source);\n\n  if (!includeArray) {\n    return { status: \"unrecognised\" };\n  }\n\n  const insertAt = includeArray.index + includeArray[0].length;\n\n  return {\n    status: \"added\",\n    next: `${source.slice(0, insertAt)}${JSON.stringify(entry)}, ${source.slice(insertAt)}`,\n  };\n}\n\n/**\n * Add one entry to the project's `tsconfig.json` `include` array.\n *\n * Never throws. A tsconfig this cannot patch produces a printed instruction the\n * developer can follow by hand — a feature must not abort a whole `add` because\n * one optional convenience could not be applied.\n *\n * @param entry The include entry to add, e.g. `\"emails\"`.\n * @param reason One line explaining what breaks without it, printed when the\n *               patch has to be handed back to the developer.\n */\nexport async function patchTsconfigInclude(entry: string, reason: string): Promise<void> {\n  const tsconfigPath = rootPath(\"tsconfig.json\");\n\n  const printManualInstruction = (problem: string) => {\n    console.log(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(\"tsconfig.json\")} ${problem} — ` +\n        `add ${JSON.stringify(entry)} to its \\`include\\` array yourself.\\n  ${reason}`,\n    );\n  };\n\n  if (!(await fileExistsAsync(tsconfigPath))) {\n    printManualInstruction(\"not found\");\n\n    return;\n  }\n\n  const insertion = insertIncludeEntry(await getFileAsync(tsconfigPath), entry);\n\n  if (insertion.status === \"already-present\") {\n    return;\n  }\n\n  if (insertion.status === \"unrecognised\") {\n    printManualInstruction(\"has no recognisable `include` array\");\n\n    return;\n  }\n\n  await putFileAsync(tsconfigPath, insertion.next);\n  console.log(`${colors.green(\"✓\")} Added ${JSON.stringify(entry)} to tsconfig.json include`);\n}\n\n/**\n * Escape a literal string for embedding in a regular expression.\n *\n * @param value The literal to escape.\n * @returns The escaped literal.\n */\nfunction escapeForRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAgB,mBAAmB,QAAgB,OAAiC;CAGlF,IAAI,IAAI,OAAO,OAAO,gBAAgB,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,MAAM,GAC7D,OAAO,EAAE,QAAQ,kBAAkB;CAGrC,MAAM,eAAe,qBAAqB,KAAK,MAAM;CAErD,IAAI,CAAC,cACH,OAAO,EAAE,QAAQ,eAAe;CAGlC,MAAM,WAAW,aAAa,QAAQ,aAAa,EAAE,CAAC;CAEtD,OAAO;EACL,QAAQ;EACR,MAAM,GAAG,OAAO,MAAM,GAAG,QAAQ,IAAI,KAAK,UAAU,KAAK,EAAE,IAAI,OAAO,MAAM,QAAQ;CACtF;AACF;;;;;;;;;;;;AAaA,eAAsB,qBAAqB,OAAe,QAA+B;CACvF,MAAM,eAAe,SAAS,eAAe;CAE7C,MAAM,0BAA0B,YAAoB;EAClD,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,eAAe,EAAE,GAAG,QAAQ,SACtE,KAAK,UAAU,KAAK,EAAE,yCAAyC,QAC1E;CACF;CAEA,IAAI,CAAE,MAAM,gBAAgB,YAAY,GAAI;EAC1C,uBAAuB,WAAW;EAElC;CACF;CAEA,MAAM,YAAY,mBAAmB,MAAM,aAAa,YAAY,GAAG,KAAK;CAE5E,IAAI,UAAU,WAAW,mBACvB;CAGF,IAAI,UAAU,WAAW,gBAAgB;EACvC,uBAAuB,qCAAqC;EAE5D;CACF;CAEA,MAAM,aAAa,cAAc,UAAU,IAAI;CAC/C,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,SAAS,KAAK,UAAU,KAAK,EAAE,0BAA0B;AAC5F;;;;;;;AAQA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD"}

package/esm/generations/features/shared/relocate-conflicting-home-route.mjs

@@ -3,7 +3,7 @@ import "../../../utils/index.mjs";
 import { getFileAsync, putFileAsync } from "@warlock.js/fs";
 import glob from "fast-glob";
 
-//#region ../core/src/generations/features/shared/relocate-conflicting-home-route.ts
+//#region ../../packages/core/src/generations/features/shared/relocate-conflicting-home-route.ts
 /**
 * A TOP-LEVEL `router.get("/", ...)` — anchored at column 0 on purpose.
 *

package/esm/generations/features/shared/relocate-conflicting-home-route.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relocate-conflicting-home-route.mjs","names":[],"sources":["../../../../../../../../../core/src/generations/features/shared/relocate-conflicting-home-route.ts"],"sourcesContent":["import { getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport glob from \"fast-glob\";\nimport { srcPath } from \"../../../utils\";\n\n/**\n * A TOP-LEVEL `router.get(\"/\", ...)` — anchored at column 0 on purpose.\n *\n * Routes nested in a `router.group({ prefix: \"/x\" }, ...)` are indented by every\n * formatter this codebase runs, and their real path is `/x`, not `/`. Anchoring\n * is what keeps the notifications feature's own `router.get(\"/\", ...)` (inside\n * the `/notifications` group) from reading as a homepage collision.\n *\n * Only the path literal is captured. The handler — a bare identifier in the\n * template, but possibly an inline arrow spanning lines — is never matched, so\n * the rewrite below cannot damage it.\n */\nconst TOP_LEVEL_ROOT_GET = /^router\\s*\\.\\s*get\\(\\s*([\"'`])\\/\\1/gm;\n\n/**\n * Whether `/welcome` is already spoken for, so relocating onto it would trade\n * one duplicate-route 500 for another.\n */\nconst TOP_LEVEL_WELCOME_GET = /^router\\s*\\.\\s*get\\(\\s*([\"'`])\\/welcome\\1/m;\n\nexport type HomeRouteCollision =\n  /** Nothing under `src/app` claims a top-level `/` — write the page as normal. */\n  | { outcome: \"absent\" }\n  /** The one file that claimed `/` was moved to `/welcome`; the page is safe to write. */\n  | { outcome: \"relocated\"; relativePath: string }\n  /** Something claims `/` that we will not rewrite. The page is NOT written. */\n  | { outcome: \"conflict\"; reason: string }\n  /** We tried to relocate and could not. The page is NOT written. */\n  | { outcome: \"failed\"; reason: string };\n\n/** One routes source file, as read from disk (or handed to the pure resolver in a test). */\nexport type RoutesFileSource = {\n  relativePath: string;\n  source: string;\n};\n\n/** What {@link resolveHomeRouteCollision} decided, plus the sources it rewrote. */\nexport type HomeRouteResolution = {\n  collision: HomeRouteCollision;\n  rewrites: RoutesFileSource[];\n};\n\n/**\n * Decide what to do about `src/app/**\\/routes.{ts,tsx}` claiming `/`, and\n * produce the rewritten source when exactly one file does.\n *\n * Pure by design: no filesystem access here, so this is the part a test can\n * exercise directly without touching disk. {@link relocateConflictingHomeRoute}\n * is the thin I/O wrapper — it reads the files, calls this, and writes back\n * whatever this returns in `rewrites`.\n *\n * @param files Every `routes.{ts,tsx}` file under `src/app`, with its current text.\n * @returns The collision outcome, and the (possibly empty) list of files to write back.\n */\nexport function resolveHomeRouteCollision(files: RoutesFileSource[]): HomeRouteResolution {\n  const claimants = files\n    .map((file) => ({ file, matches: file.source.match(TOP_LEVEL_ROOT_GET) ?? [] }))\n    .filter(({ matches }) => matches.length > 0);\n\n  if (claimants.length === 0) {\n    return { collision: { outcome: \"absent\" }, rewrites: [] };\n  }\n\n  if (claimants.length > 1) {\n    const names = claimants.map(({ file }) => file.relativePath).join(\", \");\n\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `multiple files declare a top-level GET \"/\" (${names})`,\n      },\n      rewrites: [],\n    };\n  }\n\n  const claimant = claimants[0];\n\n  // The two guards above establish exactly one claimant, but the compiler does\n  // not narrow a destructured element from a length check. Reporting \"absent\"\n  // is the same answer the empty case gives, and the honest one: with no\n  // claimant there is no conflicting home route to relocate.\n  if (claimant === undefined) {\n    return { collision: { outcome: \"absent\" }, rewrites: [] };\n  }\n\n  const { file, matches } = claimant;\n\n  if (matches.length > 1) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath} declares ${matches.length} top-level GET \"/\" routes`,\n      },\n      rewrites: [],\n    };\n  }\n\n  if (TOP_LEVEL_WELCOME_GET.test(file.source)) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath} already declares GET \"/welcome\", so the usual relocation target is taken`,\n      },\n      rewrites: [],\n    };\n  }\n\n  const next = file.source.replace(TOP_LEVEL_ROOT_GET, (match: string, quote: string) =>\n    match.replace(`${quote}/${quote}`, `${quote}/welcome${quote}`),\n  );\n\n  if (next === file.source) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath}'s GET \"/\" route could not be rewritten`,\n      },\n      rewrites: [],\n    };\n  }\n\n  return {\n    collision: { outcome: \"relocated\", relativePath: file.relativePath },\n    rewrites: [{ relativePath: file.relativePath, source: next }],\n  };\n}\n\n/**\n * Make room for a page that declares `route.path = \"/\"`.\n *\n * The project template registers `router.get(\"/\", homePageController)` and the\n * page stub declares `route.path = \"/\"`. Fastify rejects the second registration\n * (`Method 'GET' already declared for route '/'`) and the homepage 500s at\n * request time — so `warlock add web` cannot just write the page and hope.\n *\n * This used to check exactly one hardcoded path, `src/app/shared/routes.ts`.\n * That guard never fired on a real scaffold: the template registers the home\n * route at `src/app/home/routes.ts`, `fileExistsAsync` on the wrong path always\n * failed, and every call silently returned `absent` — the collision-avoidance\n * logic below existed and was correct, but was pointed at a file that does not\n * exist, so it never ran. It now scans every `src/app/**\\/routes.{ts,tsx}`\n * instead of trusting one filename, so renaming the template's routes file\n * again cannot reintroduce the same silent no-op.\n *\n * Of the three ways out, this RELOCATES the JSON route to `/welcome` rather than\n * deleting it or refusing to scaffold:\n *\n * - Deleting the controller is what the scaffolder's own `react` feature does,\n *   but it may do that: it owns the file it is deleting, seconds after writing\n *   it. `warlock add web` runs against a project a human has been living in, and\n *   silently unlinking their code is not a thing an `add` command gets to do.\n * - Writing the page anyway and printing a warning ships a project whose\n *   homepage 500s. A warning above a broken app is still a broken app.\n * - Relocating keeps BOTH surfaces working: the React homepage takes `/`, the\n *   JSON welcome answers at `/welcome`, and no line of user code disappears.\n *\n * Only the exact top-level shape is rewritten, and only the path literal inside\n * it. Anything else that claims `/` is reported and left completely alone — we\n * do not guess at code we cannot recognise.\n */\nexport async function relocateConflictingHomeRoute(): Promise<HomeRouteCollision> {\n  const relativePaths = await glob(\"**/routes.{ts,tsx}\", {\n    cwd: srcPath(\"app\"),\n    absolute: false,\n  });\n\n  if (relativePaths.length === 0) {\n    return { outcome: \"absent\" };\n  }\n\n  let files: RoutesFileSource[];\n\n  try {\n    files = await Promise.all(\n      relativePaths.map(async (relativePath) => ({\n        relativePath: `app/${relativePath}`,\n        source: await getFileAsync(srcPath(\"app\", relativePath)),\n      })),\n    );\n  } catch (error) {\n    return {\n      outcome: \"failed\",\n      reason: `could not be read (${(error as Error).message})`,\n    };\n  }\n\n  const { collision, rewrites } = resolveHomeRouteCollision(files);\n\n  if (rewrites.length === 0) {\n    return collision;\n  }\n\n  try {\n    await Promise.all(\n      rewrites.map((file) => putFileAsync(srcPath(file.relativePath), file.source)),\n    );\n  } catch (error) {\n    return {\n      outcome: \"failed\",\n      reason: `could not be written (${(error as Error).message})`,\n    };\n  }\n\n  return collision;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBA,MAAM,qBAAqB;;;;;AAM3B,MAAM,wBAAwB;;;;;;;;;;;;;AAoC9B,SAAgB,0BAA0B,OAAgD;CACxF,MAAM,YAAY,MACf,KAAK,UAAU;EAAE;EAAM,SAAS,KAAK,OAAO,MAAM,kBAAkB,KAAK,CAAC;CAAE,EAAE,CAAC,CAC/E,QAAQ,EAAE,cAAc,QAAQ,SAAS,CAAC;CAE7C,IAAI,UAAU,WAAW,GACvB,OAAO;EAAE,WAAW,EAAE,SAAS,SAAS;EAAG,UAAU,CAAC;CAAE;CAG1D,IAAI,UAAU,SAAS,GAGrB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,+CALE,UAAU,KAAK,EAAE,WAAW,KAAK,YAAY,CAAC,CAAC,KAAK,IAKH,EAAE;EAC/D;EACA,UAAU,CAAC;CACb;CAGF,MAAM,WAAW,UAAU;CAM3B,IAAI,aAAa,QACf,OAAO;EAAE,WAAW,EAAE,SAAS,SAAS;EAAG,UAAU,CAAC;CAAE;CAG1D,MAAM,EAAE,MAAM,YAAY;CAE1B,IAAI,QAAQ,SAAS,GACnB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa,YAAY,QAAQ,OAAO;EAC1D;EACA,UAAU,CAAC;CACb;CAGF,IAAI,sBAAsB,KAAK,KAAK,MAAM,GACxC,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa;EAC/B;EACA,UAAU,CAAC;CACb;CAGF,MAAM,OAAO,KAAK,OAAO,QAAQ,qBAAqB,OAAe,UACnE,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,UAAU,OAAO,CAC/D;CAEA,IAAI,SAAS,KAAK,QAChB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa;EAC/B;EACA,UAAU,CAAC;CACb;CAGF,OAAO;EACL,WAAW;GAAE,SAAS;GAAa,cAAc,KAAK;EAAa;EACnE,UAAU,CAAC;GAAE,cAAc,KAAK;GAAc,QAAQ;EAAK,CAAC;CAC9D;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,eAAsB,+BAA4D;CAChF,MAAM,gBAAgB,MAAM,KAAK,sBAAsB;EACrD,KAAK,QAAQ,KAAK;EAClB,UAAU;CACZ,CAAC;CAED,IAAI,cAAc,WAAW,GAC3B,OAAO,EAAE,SAAS,SAAS;CAG7B,IAAI;CAEJ,IAAI;EACF,QAAQ,MAAM,QAAQ,IACpB,cAAc,IAAI,OAAO,kBAAkB;GACzC,cAAc,OAAO;GACrB,QAAQ,MAAM,aAAa,QAAQ,OAAO,YAAY,CAAC;EACzD,EAAE,CACJ;CACF,SAAS,OAAO;EACd,OAAO;GACL,SAAS;GACT,QAAQ,sBAAuB,MAAgB,QAAQ;EACzD;CACF;CAEA,MAAM,EAAE,WAAW,aAAa,0BAA0B,KAAK;CAE/D,IAAI,SAAS,WAAW,GACtB,OAAO;CAGT,IAAI;EACF,MAAM,QAAQ,IACZ,SAAS,KAAK,SAAS,aAAa,QAAQ,KAAK,YAAY,GAAG,KAAK,MAAM,CAAC,CAC9E;CACF,SAAS,OAAO;EACd,OAAO;GACL,SAAS;GACT,QAAQ,yBAA0B,MAAgB,QAAQ;EAC5D;CACF;CAEA,OAAO;AACT"}
+{"version":3,"file":"relocate-conflicting-home-route.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/generations/features/shared/relocate-conflicting-home-route.ts"],"sourcesContent":["import { getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport glob from \"fast-glob\";\nimport { srcPath } from \"../../../utils\";\n\n/**\n * A TOP-LEVEL `router.get(\"/\", ...)` — anchored at column 0 on purpose.\n *\n * Routes nested in a `router.group({ prefix: \"/x\" }, ...)` are indented by every\n * formatter this codebase runs, and their real path is `/x`, not `/`. Anchoring\n * is what keeps the notifications feature's own `router.get(\"/\", ...)` (inside\n * the `/notifications` group) from reading as a homepage collision.\n *\n * Only the path literal is captured. The handler — a bare identifier in the\n * template, but possibly an inline arrow spanning lines — is never matched, so\n * the rewrite below cannot damage it.\n */\nconst TOP_LEVEL_ROOT_GET = /^router\\s*\\.\\s*get\\(\\s*([\"'`])\\/\\1/gm;\n\n/**\n * Whether `/welcome` is already spoken for, so relocating onto it would trade\n * one duplicate-route 500 for another.\n */\nconst TOP_LEVEL_WELCOME_GET = /^router\\s*\\.\\s*get\\(\\s*([\"'`])\\/welcome\\1/m;\n\nexport type HomeRouteCollision =\n  /** Nothing under `src/app` claims a top-level `/` — write the page as normal. */\n  | { outcome: \"absent\" }\n  /** The one file that claimed `/` was moved to `/welcome`; the page is safe to write. */\n  | { outcome: \"relocated\"; relativePath: string }\n  /** Something claims `/` that we will not rewrite. The page is NOT written. */\n  | { outcome: \"conflict\"; reason: string }\n  /** We tried to relocate and could not. The page is NOT written. */\n  | { outcome: \"failed\"; reason: string };\n\n/** One routes source file, as read from disk (or handed to the pure resolver in a test). */\nexport type RoutesFileSource = {\n  relativePath: string;\n  source: string;\n};\n\n/** What {@link resolveHomeRouteCollision} decided, plus the sources it rewrote. */\nexport type HomeRouteResolution = {\n  collision: HomeRouteCollision;\n  rewrites: RoutesFileSource[];\n};\n\n/**\n * Decide what to do about `src/app/**\\/routes.{ts,tsx}` claiming `/`, and\n * produce the rewritten source when exactly one file does.\n *\n * Pure by design: no filesystem access here, so this is the part a test can\n * exercise directly without touching disk. {@link relocateConflictingHomeRoute}\n * is the thin I/O wrapper — it reads the files, calls this, and writes back\n * whatever this returns in `rewrites`.\n *\n * @param files Every `routes.{ts,tsx}` file under `src/app`, with its current text.\n * @returns The collision outcome, and the (possibly empty) list of files to write back.\n */\nexport function resolveHomeRouteCollision(files: RoutesFileSource[]): HomeRouteResolution {\n  const claimants = files\n    .map((file) => ({ file, matches: file.source.match(TOP_LEVEL_ROOT_GET) ?? [] }))\n    .filter(({ matches }) => matches.length > 0);\n\n  if (claimants.length === 0) {\n    return { collision: { outcome: \"absent\" }, rewrites: [] };\n  }\n\n  if (claimants.length > 1) {\n    const names = claimants.map(({ file }) => file.relativePath).join(\", \");\n\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `multiple files declare a top-level GET \"/\" (${names})`,\n      },\n      rewrites: [],\n    };\n  }\n\n  const claimant = claimants[0];\n\n  // The two guards above establish exactly one claimant, but the compiler does\n  // not narrow a destructured element from a length check. Reporting \"absent\"\n  // is the same answer the empty case gives, and the honest one: with no\n  // claimant there is no conflicting home route to relocate.\n  if (claimant === undefined) {\n    return { collision: { outcome: \"absent\" }, rewrites: [] };\n  }\n\n  const { file, matches } = claimant;\n\n  if (matches.length > 1) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath} declares ${matches.length} top-level GET \"/\" routes`,\n      },\n      rewrites: [],\n    };\n  }\n\n  if (TOP_LEVEL_WELCOME_GET.test(file.source)) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath} already declares GET \"/welcome\", so the usual relocation target is taken`,\n      },\n      rewrites: [],\n    };\n  }\n\n  const next = file.source.replace(TOP_LEVEL_ROOT_GET, (match: string, quote: string) =>\n    match.replace(`${quote}/${quote}`, `${quote}/welcome${quote}`),\n  );\n\n  if (next === file.source) {\n    return {\n      collision: {\n        outcome: \"conflict\",\n        reason: `${file.relativePath}'s GET \"/\" route could not be rewritten`,\n      },\n      rewrites: [],\n    };\n  }\n\n  return {\n    collision: { outcome: \"relocated\", relativePath: file.relativePath },\n    rewrites: [{ relativePath: file.relativePath, source: next }],\n  };\n}\n\n/**\n * Make room for a page that declares `route.path = \"/\"`.\n *\n * The project template registers `router.get(\"/\", homePageController)` and the\n * page stub declares `route.path = \"/\"`. Fastify rejects the second registration\n * (`Method 'GET' already declared for route '/'`) and the homepage 500s at\n * request time — so `warlock add web` cannot just write the page and hope.\n *\n * This used to check exactly one hardcoded path, `src/app/shared/routes.ts`.\n * That guard never fired on a real scaffold: the template registers the home\n * route at `src/app/home/routes.ts`, `fileExistsAsync` on the wrong path always\n * failed, and every call silently returned `absent` — the collision-avoidance\n * logic below existed and was correct, but was pointed at a file that does not\n * exist, so it never ran. It now scans every `src/app/**\\/routes.{ts,tsx}`\n * instead of trusting one filename, so renaming the template's routes file\n * again cannot reintroduce the same silent no-op.\n *\n * Of the three ways out, this RELOCATES the JSON route to `/welcome` rather than\n * deleting it or refusing to scaffold:\n *\n * - Deleting the controller is what the scaffolder's own `react` feature does,\n *   but it may do that: it owns the file it is deleting, seconds after writing\n *   it. `warlock add web` runs against a project a human has been living in, and\n *   silently unlinking their code is not a thing an `add` command gets to do.\n * - Writing the page anyway and printing a warning ships a project whose\n *   homepage 500s. A warning above a broken app is still a broken app.\n * - Relocating keeps BOTH surfaces working: the React homepage takes `/`, the\n *   JSON welcome answers at `/welcome`, and no line of user code disappears.\n *\n * Only the exact top-level shape is rewritten, and only the path literal inside\n * it. Anything else that claims `/` is reported and left completely alone — we\n * do not guess at code we cannot recognise.\n */\nexport async function relocateConflictingHomeRoute(): Promise<HomeRouteCollision> {\n  const relativePaths = await glob(\"**/routes.{ts,tsx}\", {\n    cwd: srcPath(\"app\"),\n    absolute: false,\n  });\n\n  if (relativePaths.length === 0) {\n    return { outcome: \"absent\" };\n  }\n\n  let files: RoutesFileSource[];\n\n  try {\n    files = await Promise.all(\n      relativePaths.map(async (relativePath) => ({\n        relativePath: `app/${relativePath}`,\n        source: await getFileAsync(srcPath(\"app\", relativePath)),\n      })),\n    );\n  } catch (error) {\n    return {\n      outcome: \"failed\",\n      reason: `could not be read (${(error as Error).message})`,\n    };\n  }\n\n  const { collision, rewrites } = resolveHomeRouteCollision(files);\n\n  if (rewrites.length === 0) {\n    return collision;\n  }\n\n  try {\n    await Promise.all(\n      rewrites.map((file) => putFileAsync(srcPath(file.relativePath), file.source)),\n    );\n  } catch (error) {\n    return {\n      outcome: \"failed\",\n      reason: `could not be written (${(error as Error).message})`,\n    };\n  }\n\n  return collision;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBA,MAAM,qBAAqB;;;;;AAM3B,MAAM,wBAAwB;;;;;;;;;;;;;AAoC9B,SAAgB,0BAA0B,OAAgD;CACxF,MAAM,YAAY,MACf,KAAK,UAAU;EAAE;EAAM,SAAS,KAAK,OAAO,MAAM,kBAAkB,KAAK,CAAC;CAAE,EAAE,CAAC,CAC/E,QAAQ,EAAE,cAAc,QAAQ,SAAS,CAAC;CAE7C,IAAI,UAAU,WAAW,GACvB,OAAO;EAAE,WAAW,EAAE,SAAS,SAAS;EAAG,UAAU,CAAC;CAAE;CAG1D,IAAI,UAAU,SAAS,GAGrB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,+CALE,UAAU,KAAK,EAAE,WAAW,KAAK,YAAY,CAAC,CAAC,KAAK,IAKH,EAAE;EAC/D;EACA,UAAU,CAAC;CACb;CAGF,MAAM,WAAW,UAAU;CAM3B,IAAI,aAAa,QACf,OAAO;EAAE,WAAW,EAAE,SAAS,SAAS;EAAG,UAAU,CAAC;CAAE;CAG1D,MAAM,EAAE,MAAM,YAAY;CAE1B,IAAI,QAAQ,SAAS,GACnB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa,YAAY,QAAQ,OAAO;EAC1D;EACA,UAAU,CAAC;CACb;CAGF,IAAI,sBAAsB,KAAK,KAAK,MAAM,GACxC,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa;EAC/B;EACA,UAAU,CAAC;CACb;CAGF,MAAM,OAAO,KAAK,OAAO,QAAQ,qBAAqB,OAAe,UACnE,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,UAAU,OAAO,CAC/D;CAEA,IAAI,SAAS,KAAK,QAChB,OAAO;EACL,WAAW;GACT,SAAS;GACT,QAAQ,GAAG,KAAK,aAAa;EAC/B;EACA,UAAU,CAAC;CACb;CAGF,OAAO;EACL,WAAW;GAAE,SAAS;GAAa,cAAc,KAAK;EAAa;EACnE,UAAU,CAAC;GAAE,cAAc,KAAK;GAAc,QAAQ;EAAK,CAAC;CAC9D;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,eAAsB,+BAA4D;CAChF,MAAM,gBAAgB,MAAM,KAAK,sBAAsB;EACrD,KAAK,QAAQ,KAAK;EAClB,UAAU;CACZ,CAAC;CAED,IAAI,cAAc,WAAW,GAC3B,OAAO,EAAE,SAAS,SAAS;CAG7B,IAAI;CAEJ,IAAI;EACF,QAAQ,MAAM,QAAQ,IACpB,cAAc,IAAI,OAAO,kBAAkB;GACzC,cAAc,OAAO;GACrB,QAAQ,MAAM,aAAa,QAAQ,OAAO,YAAY,CAAC;EACzD,EAAE,CACJ;CACF,SAAS,OAAO;EACd,OAAO;GACL,SAAS;GACT,QAAQ,sBAAuB,MAAgB,QAAQ;EACzD;CACF;CAEA,MAAM,EAAE,WAAW,aAAa,0BAA0B,KAAK;CAE/D,IAAI,SAAS,WAAW,GACtB,OAAO;CAGT,IAAI;EACF,MAAM,QAAQ,IACZ,SAAS,KAAK,SAAS,aAAa,QAAQ,KAAK,YAAY,GAAG,KAAK,MAAM,CAAC,CAC9E;CACF,SAAS,OAAO;EACd,OAAO;GACL,SAAS;GACT,QAAQ,yBAA0B,MAAgB,QAAQ;EAC5D;CACF;CAEA,OAAO;AACT"}

package/esm/generations/features/shared/resolve-contact-scaffold.mjs

@@ -1,6 +1,6 @@
 import { colors } from "@mongez/copper";
 
-//#region ../core/src/generations/features/shared/resolve-contact-scaffold.ts
+//#region ../../packages/core/src/generations/features/shared/resolve-contact-scaffold.ts
 const CONTROLLER_PATH = "src/app/contact/controllers/contact.controller.ts";
 const ROUTES_PATH = "src/app/contact/routes.ts";
 /**

package/esm/generations/features/shared/resolve-contact-scaffold.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-contact-scaffold.mjs","names":[],"sources":["../../../../../../../../../core/src/generations/features/shared/resolve-contact-scaffold.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\n\n/** Whether each contact-module file `completeWebInstallation` writes already exists on disk. */\nexport type ContactScaffoldState = {\n  controllerExists: boolean;\n  routesExists: boolean;\n};\n\n/** Which contact-module files may be written, and what to tell the user. */\nexport type ContactScaffoldPlan = {\n  writeController: boolean;\n  writeRoutes: boolean;\n  messages: string[];\n};\n\nconst CONTROLLER_PATH = \"src/app/contact/controllers/contact.controller.ts\";\nconst ROUTES_PATH = \"src/app/contact/routes.ts\";\n\n/**\n * Decide which of the two contact-module files are safe to (re)write, and\n * report loudly about the ones that are not.\n *\n * Pure by design: no filesystem access here, so a test can exercise every\n * combination directly. {@link completeWebInstallation} in `web.feature.ts`\n * is the thin I/O wrapper — it stats both files, calls this, writes back\n * whatever this says to write, and prints whatever this says to print.\n *\n * `src/web/root.tsx` is the \"a human has been here\" sentinel for the web\n * layer as a whole, but `src/app/contact/**` is an ordinary application\n * module the web feature happens to also scaffold — nothing stops a project\n * from having its own `contact` module (with its own controller and routes)\n * independently of ever having run `warlock add web`. Trusting root.tsx's\n * absence as license to write these two files meant `warlock add web` could\n * silently overwrite a human's existing `contact` module. Exactly like\n * {@link relocateConflictingHomeRoute} already insists for the home route:\n * \"`warlock add web` runs against a project a human has been living in, and\n * silently unlinking their code is not a thing an `add` command gets to do.\"\n * So each file gets its own independent existence guard, and an existing\n * file is skipped — never overwritten, never a reason to abort the rest of\n * the install.\n */\nexport function resolveContactScaffold(state: ContactScaffoldState): ContactScaffoldPlan {\n  const writeController = !state.controllerExists;\n  const writeRoutes = !state.routesExists;\n  const messages: string[] = [];\n\n  if (state.controllerExists) {\n    messages.push(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(CONTROLLER_PATH)} already exists, skipping — ` +\n        \"the contact form's endpoint is missing this controller's logic unless it already handles \" +\n        `${colors.yellowBright(\"POST /api/contact\")}, so the form will 404 until you wire it yourself.`,\n    );\n  }\n\n  if (state.routesExists) {\n    messages.push(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(ROUTES_PATH)} already exists, skipping — ` +\n        `the contact form's endpoint (${colors.yellowBright(\"POST /api/contact\")}) was not registered here, ` +\n        \"so the form will 404 until you wire it yourself.\",\n    );\n  }\n\n  if (writeController && writeRoutes) {\n    messages.push(`${colors.green(\"✓\")} Created POST /api/contact starter route`);\n  }\n\n  return { writeController, writeRoutes, messages };\n}\n"],"mappings":";;;AAeA,MAAM,kBAAkB;AACxB,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;AAyBpB,SAAgB,uBAAuB,OAAkD;CACvF,MAAM,kBAAkB,CAAC,MAAM;CAC/B,MAAM,cAAc,CAAC,MAAM;CAC3B,MAAM,WAAqB,CAAC;CAE5B,IAAI,MAAM,kBACR,SAAS,KACP,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,eAAe,EAAE,uHAE/D,OAAO,aAAa,mBAAmB,EAAE,mDAChD;CAGF,IAAI,MAAM,cACR,SAAS,KACP,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,WAAW,EAAE,2DAC9B,OAAO,aAAa,mBAAmB,EAAE,4EAE7E;CAGF,IAAI,mBAAmB,aACrB,SAAS,KAAK,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAG9E,OAAO;EAAE;EAAiB;EAAa;CAAS;AAClD"}
+{"version":3,"file":"resolve-contact-scaffold.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/generations/features/shared/resolve-contact-scaffold.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\n\n/** Whether each contact-module file `completeWebInstallation` writes already exists on disk. */\nexport type ContactScaffoldState = {\n  controllerExists: boolean;\n  routesExists: boolean;\n};\n\n/** Which contact-module files may be written, and what to tell the user. */\nexport type ContactScaffoldPlan = {\n  writeController: boolean;\n  writeRoutes: boolean;\n  messages: string[];\n};\n\nconst CONTROLLER_PATH = \"src/app/contact/controllers/contact.controller.ts\";\nconst ROUTES_PATH = \"src/app/contact/routes.ts\";\n\n/**\n * Decide which of the two contact-module files are safe to (re)write, and\n * report loudly about the ones that are not.\n *\n * Pure by design: no filesystem access here, so a test can exercise every\n * combination directly. {@link completeWebInstallation} in `web.feature.ts`\n * is the thin I/O wrapper — it stats both files, calls this, writes back\n * whatever this says to write, and prints whatever this says to print.\n *\n * `src/web/root.tsx` is the \"a human has been here\" sentinel for the web\n * layer as a whole, but `src/app/contact/**` is an ordinary application\n * module the web feature happens to also scaffold — nothing stops a project\n * from having its own `contact` module (with its own controller and routes)\n * independently of ever having run `warlock add web`. Trusting root.tsx's\n * absence as license to write these two files meant `warlock add web` could\n * silently overwrite a human's existing `contact` module. Exactly like\n * {@link relocateConflictingHomeRoute} already insists for the home route:\n * \"`warlock add web` runs against a project a human has been living in, and\n * silently unlinking their code is not a thing an `add` command gets to do.\"\n * So each file gets its own independent existence guard, and an existing\n * file is skipped — never overwritten, never a reason to abort the rest of\n * the install.\n */\nexport function resolveContactScaffold(state: ContactScaffoldState): ContactScaffoldPlan {\n  const writeController = !state.controllerExists;\n  const writeRoutes = !state.routesExists;\n  const messages: string[] = [];\n\n  if (state.controllerExists) {\n    messages.push(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(CONTROLLER_PATH)} already exists, skipping — ` +\n        \"the contact form's endpoint is missing this controller's logic unless it already handles \" +\n        `${colors.yellowBright(\"POST /api/contact\")}, so the form will 404 until you wire it yourself.`,\n    );\n  }\n\n  if (state.routesExists) {\n    messages.push(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(ROUTES_PATH)} already exists, skipping — ` +\n        `the contact form's endpoint (${colors.yellowBright(\"POST /api/contact\")}) was not registered here, ` +\n        \"so the form will 404 until you wire it yourself.\",\n    );\n  }\n\n  if (writeController && writeRoutes) {\n    messages.push(`${colors.green(\"✓\")} Created POST /api/contact starter route`);\n  }\n\n  return { writeController, writeRoutes, messages };\n}\n"],"mappings":";;;AAeA,MAAM,kBAAkB;AACxB,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;AAyBpB,SAAgB,uBAAuB,OAAkD;CACvF,MAAM,kBAAkB,CAAC,MAAM;CAC/B,MAAM,cAAc,CAAC,MAAM;CAC3B,MAAM,WAAqB,CAAC;CAE5B,IAAI,MAAM,kBACR,SAAS,KACP,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,eAAe,EAAE,uHAE/D,OAAO,aAAa,mBAAmB,EAAE,mDAChD;CAGF,IAAI,MAAM,cACR,SAAS,KACP,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,WAAW,EAAE,2DAC9B,OAAO,aAAa,mBAAmB,EAAE,4EAE7E;CAGF,IAAI,mBAAmB,aACrB,SAAS,KAAK,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAG9E,OAAO;EAAE;EAAiB;EAAa;CAAS;AAClD"}

package/esm/generations/features/sitemap.feature.mjs

@@ -5,7 +5,7 @@ import { mergeWebSitemapConfig } from "./shared/merge-web-sitemap-config.mjs";
 import { colors } from "@mongez/copper";
 import { fileExistsAsync, getFileAsync, putFileAsync } from "@warlock.js/fs";
 
-//#region ../core/src/generations/features/sitemap.feature.ts
+//#region ../../packages/core/src/generations/features/sitemap.feature.ts
 const NEXT_STEPS = "Next: set `app.publicUrl` (src/config/app.ts) or the PUBLIC_APP_URL environment variable, then flip `sitemap.enabled` to true in src/config/web.ts.";
 /**
 * Ships DISABLED because a sitemap needs this application's public origin and

package/esm/generations/features/sitemap.feature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sitemap.feature.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/sitemap.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport { srcPath } from \"../../utils\";\nimport { mergeWebSitemapConfig } from \"./shared/merge-web-sitemap-config\";\nimport { type FeatureDefinition, INSTALLED_WARLOCK_VERSION } from \"./types\";\n\nconst NEXT_STEPS =\n  \"Next: set `app.publicUrl` (src/config/app.ts) or the PUBLIC_APP_URL environment \" +\n  \"variable, then flip `sitemap.enabled` to true in src/config/web.ts.\";\n\n/**\n * Ships DISABLED because a sitemap needs this application's public origin and\n * a freshly generated app has no way to know it. Two steps to turn it on:\n *\n *   1. set `app.publicUrl` in src/config/app.ts, or the PUBLIC_APP_URL\n *      environment variable;\n *   2. flip `sitemap.enabled` to true here.\n *\n * With it enabled and no origin configured, generation REFUSES rather than\n * serving absolute URLs built from a guessed host — a sitemap pointing at\n * the wrong domain is worse than one that never starts, because nothing\n * downstream reports it.\n */\nconst freshWebConfigStub = `import type { WebSitemapConfig } from \"@warlock.js/web/sitemap\";\n\nconst webConfig: { sitemap: WebSitemapConfig } = {\n  sitemap: {\n    enabled: false,\n    path: \"/sitemap.xml\",\n    defaults: { changefreq: \"weekly\", priority: 0.5 },\n  },\n};\n\nexport default webConfig;\n`;\n\n/**\n * `warlock add sitemap` writes its policy into the app's \\`src/config/web.ts\\`,\n * under the \\`sitemap\\` key — there is no \\`src/config/sitemap.ts\\` and no\n * standalone connector to register; \\`@warlock.js/web\\` (already installed via\n * the \\`web\\` requirement) reads \\`web.sitemap\\` itself.\n *\n * Creates \\`web.ts\\` when the app does not have one yet; otherwise merges a\n * \\`sitemap\\` section into whatever is already there rather than clobbering it.\n */\nasync function installSitemapConfig(): Promise<void> {\n  const configPath = srcPath(\"config/web.ts\");\n\n  if (!(await fileExistsAsync(configPath))) {\n    await putFileAsync(configPath, freshWebConfigStub);\n    console.log(`${colors.green(\"✓\")} Created src/config/web.ts with a disabled sitemap section`);\n    console.log(NEXT_STEPS);\n\n    return;\n  }\n\n  const current = await getFileAsync(configPath);\n  const merge = mergeWebSitemapConfig(current);\n\n  if (merge.status === \"already-present\") {\n    console.log(\n      `${colors.yellowBright(\"sitemap\")} already configured in src/config/web.ts, skipping...`,\n    );\n\n    return;\n  }\n\n  if (merge.status === \"unrecognised\") {\n    console.log(\n      `${colors.redBright(\"✗\")} Could not safely add a \\`sitemap\\` section to ` +\n        `${colors.yellowBright(\"src/config/web.ts\")} — its exported config object was not ` +\n        \"recognised, so nothing was written. Add it yourself:\\n\" +\n        '  sitemap: { enabled: false, path: \"/sitemap.xml\", defaults: { changefreq: \"weekly\", priority: 0.5 } },',\n    );\n\n    process.exitCode = 1;\n\n    return;\n  }\n\n  await putFileAsync(configPath, merge.next);\n  console.log(`${colors.green(\"✓\")} Added a disabled \\`sitemap\\` section to src/config/web.ts`);\n  console.log(NEXT_STEPS);\n}\n\n/** `warlock add sitemap` — runtime sitemap.xml generation, backed by the page registry. */\nexport const sitemapFeature: FeatureDefinition = {\n  description:\n    \"Installs @warlock.js/sitemap — runtime sitemap.xml generation from the page registry. \" +\n    \"Adds a disabled `sitemap` section to src/config/web.ts, creating the file if it doesn't \" +\n    \"exist yet. Requires app.publicUrl (or PUBLIC_APP_URL) to be set.\",\n  requires: [\"web\"],\n  dependencies: {\n    \"@warlock.js/sitemap\": INSTALLED_WARLOCK_VERSION,\n  },\n  onExecuting: installSitemapConfig,\n};\n"],"mappings":";;;;;;;;AAMA,MAAM,aACJ;;;;;;;;;;;;;;AAgBF,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;AAsB3B,eAAe,uBAAsC;CACnD,MAAM,aAAa,QAAQ,eAAe;CAE1C,IAAI,CAAE,MAAM,gBAAgB,UAAU,GAAI;EACxC,MAAM,aAAa,YAAY,kBAAkB;EACjD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2DAA2D;EAC5F,QAAQ,IAAI,UAAU;EAEtB;CACF;CAGA,MAAM,QAAQ,sBAAsB,MADd,aAAa,UAAU,CACF;CAE3C,IAAI,MAAM,WAAW,mBAAmB;EACtC,QAAQ,IACN,GAAG,OAAO,aAAa,SAAS,EAAE,sDACpC;EAEA;CACF;CAEA,IAAI,MAAM,WAAW,gBAAgB;EACnC,QAAQ,IACN,GAAG,OAAO,UAAU,GAAG,EAAE,iDACpB,OAAO,aAAa,mBAAmB,EAAE;wGAGhD;EAEA,QAAQ,WAAW;EAEnB;CACF;CAEA,MAAM,aAAa,YAAY,MAAM,IAAI;CACzC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2DAA2D;CAC5F,QAAQ,IAAI,UAAU;AACxB;;AAGA,MAAa,iBAAoC;CAC/C,aACE;CAGF,UAAU,CAAC,KAAK;CAChB,cAAc,EACZ,uBAAuB,0BACzB;CACA,aAAa;AACf"}
+{"version":3,"file":"sitemap.feature.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/sitemap.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport { srcPath } from \"../../utils\";\nimport { mergeWebSitemapConfig } from \"./shared/merge-web-sitemap-config\";\nimport { type FeatureDefinition, INSTALLED_WARLOCK_VERSION } from \"./types\";\n\nconst NEXT_STEPS =\n  \"Next: set `app.publicUrl` (src/config/app.ts) or the PUBLIC_APP_URL environment \" +\n  \"variable, then flip `sitemap.enabled` to true in src/config/web.ts.\";\n\n/**\n * Ships DISABLED because a sitemap needs this application's public origin and\n * a freshly generated app has no way to know it. Two steps to turn it on:\n *\n *   1. set `app.publicUrl` in src/config/app.ts, or the PUBLIC_APP_URL\n *      environment variable;\n *   2. flip `sitemap.enabled` to true here.\n *\n * With it enabled and no origin configured, generation REFUSES rather than\n * serving absolute URLs built from a guessed host — a sitemap pointing at\n * the wrong domain is worse than one that never starts, because nothing\n * downstream reports it.\n */\nconst freshWebConfigStub = `import type { WebSitemapConfig } from \"@warlock.js/web/sitemap\";\n\nconst webConfig: { sitemap: WebSitemapConfig } = {\n  sitemap: {\n    enabled: false,\n    path: \"/sitemap.xml\",\n    defaults: { changefreq: \"weekly\", priority: 0.5 },\n  },\n};\n\nexport default webConfig;\n`;\n\n/**\n * `warlock add sitemap` writes its policy into the app's \\`src/config/web.ts\\`,\n * under the \\`sitemap\\` key — there is no \\`src/config/sitemap.ts\\` and no\n * standalone connector to register; \\`@warlock.js/web\\` (already installed via\n * the \\`web\\` requirement) reads \\`web.sitemap\\` itself.\n *\n * Creates \\`web.ts\\` when the app does not have one yet; otherwise merges a\n * \\`sitemap\\` section into whatever is already there rather than clobbering it.\n */\nasync function installSitemapConfig(): Promise<void> {\n  const configPath = srcPath(\"config/web.ts\");\n\n  if (!(await fileExistsAsync(configPath))) {\n    await putFileAsync(configPath, freshWebConfigStub);\n    console.log(`${colors.green(\"✓\")} Created src/config/web.ts with a disabled sitemap section`);\n    console.log(NEXT_STEPS);\n\n    return;\n  }\n\n  const current = await getFileAsync(configPath);\n  const merge = mergeWebSitemapConfig(current);\n\n  if (merge.status === \"already-present\") {\n    console.log(\n      `${colors.yellowBright(\"sitemap\")} already configured in src/config/web.ts, skipping...`,\n    );\n\n    return;\n  }\n\n  if (merge.status === \"unrecognised\") {\n    console.log(\n      `${colors.redBright(\"✗\")} Could not safely add a \\`sitemap\\` section to ` +\n        `${colors.yellowBright(\"src/config/web.ts\")} — its exported config object was not ` +\n        \"recognised, so nothing was written. Add it yourself:\\n\" +\n        '  sitemap: { enabled: false, path: \"/sitemap.xml\", defaults: { changefreq: \"weekly\", priority: 0.5 } },',\n    );\n\n    process.exitCode = 1;\n\n    return;\n  }\n\n  await putFileAsync(configPath, merge.next);\n  console.log(`${colors.green(\"✓\")} Added a disabled \\`sitemap\\` section to src/config/web.ts`);\n  console.log(NEXT_STEPS);\n}\n\n/** `warlock add sitemap` — runtime sitemap.xml generation, backed by the page registry. */\nexport const sitemapFeature: FeatureDefinition = {\n  description:\n    \"Installs @warlock.js/sitemap — runtime sitemap.xml generation from the page registry. \" +\n    \"Adds a disabled `sitemap` section to src/config/web.ts, creating the file if it doesn't \" +\n    \"exist yet. Requires app.publicUrl (or PUBLIC_APP_URL) to be set.\",\n  requires: [\"web\"],\n  dependencies: {\n    \"@warlock.js/sitemap\": INSTALLED_WARLOCK_VERSION,\n  },\n  onExecuting: installSitemapConfig,\n};\n"],"mappings":";;;;;;;;AAMA,MAAM,aACJ;;;;;;;;;;;;;;AAgBF,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;AAsB3B,eAAe,uBAAsC;CACnD,MAAM,aAAa,QAAQ,eAAe;CAE1C,IAAI,CAAE,MAAM,gBAAgB,UAAU,GAAI;EACxC,MAAM,aAAa,YAAY,kBAAkB;EACjD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2DAA2D;EAC5F,QAAQ,IAAI,UAAU;EAEtB;CACF;CAGA,MAAM,QAAQ,sBAAsB,MADd,aAAa,UAAU,CACF;CAE3C,IAAI,MAAM,WAAW,mBAAmB;EACtC,QAAQ,IACN,GAAG,OAAO,aAAa,SAAS,EAAE,sDACpC;EAEA;CACF;CAEA,IAAI,MAAM,WAAW,gBAAgB;EACnC,QAAQ,IACN,GAAG,OAAO,UAAU,GAAG,EAAE,iDACpB,OAAO,aAAa,mBAAmB,EAAE;wGAGhD;EAEA,QAAQ,WAAW;EAEnB;CACF;CAEA,MAAM,aAAa,YAAY,MAAM,IAAI;CACzC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2DAA2D;CAC5F,QAAQ,IAAI,UAAU;AACxB;;AAGA,MAAa,iBAAoC;CAC/C,aACE;CAGF,UAAU,CAAC,KAAK;CAChB,cAAc,EACZ,uBAAuB,0BACzB;CACA,aAAa;AACf"}

package/esm/generations/features/socket.feature.mjs

@@ -1,6 +1,6 @@
 import { socketConfigStub } from "../stubs.mjs";
 
-//#region ../core/src/generations/features/socket.feature.ts
+//#region ../../packages/core/src/generations/features/socket.feature.ts
 const socketFeature = {
 	description: "Installs socket.io for the realtime socket server (Socket Connector)",
 	dependencies: { "socket.io": "^4.8.3" },

package/esm/generations/features/socket.feature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"socket.feature.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/socket.feature.ts"],"sourcesContent":["import { socketConfigStub } from \"../stubs\";\nimport type { FeatureDefinition } from \"./types\";\n\nexport const socketFeature: FeatureDefinition = {\n  description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\n  dependencies: {\n    \"socket.io\": \"^4.8.3\",\n  },\n  ejectConfig: {\n    content: socketConfigStub,\n    name: \"socket\",\n  },\n};\n"],"mappings":";;;AAGA,MAAa,gBAAmC;CAC9C,aAAa;CACb,cAAc,EACZ,aAAa,SACf;CACA,aAAa;EACX,SAAS;EACT,MAAM;CACR;AACF"}
+{"version":3,"file":"socket.feature.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/socket.feature.ts"],"sourcesContent":["import { socketConfigStub } from \"../stubs\";\nimport type { FeatureDefinition } from \"./types\";\n\nexport const socketFeature: FeatureDefinition = {\n  description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\n  dependencies: {\n    \"socket.io\": \"^4.8.3\",\n  },\n  ejectConfig: {\n    content: socketConfigStub,\n    name: \"socket\",\n  },\n};\n"],"mappings":";;;AAGA,MAAa,gBAAmC;CAC9C,aAAa;CACb,cAAc,EACZ,aAAa,SACf;CACA,aAAa;EACX,SAAS;EACT,MAAM;CACR;AACF"}

package/esm/generations/features/tailwind.feature.mjs

@@ -3,7 +3,7 @@ import "../../utils/index.mjs";
 import { colors } from "@mongez/copper";
 import { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from "@warlock.js/fs";
 
-//#region ../core/src/generations/features/tailwind.feature.ts
+//#region ../../packages/core/src/generations/features/tailwind.feature.ts
 /**
 * The stylesheet entry, and the whole of Tailwind's configuration.
 *

package/esm/generations/features/tailwind.feature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tailwind.feature.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/tailwind.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport type { FeatureDefinition } from \"./types\";\n\n/**\n * The stylesheet entry, and the whole of Tailwind's configuration.\n *\n * Tailwind v4 is CSS-first: there is no `tailwind.config.js` and no `content`\n * globs to keep in sync with the project layout — the engine discovers the\n * templates that reach it through the bundler graph, and everything a v3 config\n * held (`theme`, `plugins`, `darkMode`) is expressed in CSS beside the import.\n * So this one file is the config, which is why the feature writes it rather\n * than an `ejectConfig` entry: `ejectConfig` lands in `src/config/*.ts`, and a\n * stylesheet that must sit in the bundler's path does not belong there.\n */\nconst appCssStub = `@import \"tailwindcss\";\n\n/*\n  Tailwind v4 configures itself from CSS — there is no tailwind.config.js.\n\n  Design tokens go in an @theme block, and each one becomes both a CSS variable\n  and a utility class:\n\n    @theme {\n      --color-brand: oklch(0.62 0.19 259);\n      --font-display: \"Inter\", sans-serif;\n    }\n\n  gives you \\`bg-brand\\`, \\`text-brand\\`, \\`font-display\\` and \\`var(--color-brand)\\`.\n\n  Plugins are imported here too — \\`@plugin \"@tailwindcss/typography\";\\` — and\n  your own non-utility CSS can simply follow this comment.\n*/\n`;\n\n/**\n * PostCSS rather than a Vite config file, and deliberately at the project root.\n *\n * Vite discovers `postcss.config.mjs` from the project root on its own, in the\n * dev server and in `vite build` alike, without the application owning a Vite\n * config at all. That matters here: the only app-facing Vite plugin array in\n * this framework is `webConnector({ plugins })`, which is wired into the DEV\n * server exclusively — the client build composes its own plugin list from its\n * caller. Registering `@tailwindcss/vite` there would produce styles in `dev`\n * and silently drop them from a production build, which is a worse failure than\n * any config file, because it only shows up after deploy.\n *\n * `.mjs` because a Warlock project's `package.json` is not guaranteed to set\n * `\"type\": \"module\"`, and `export default` in a `.js` file would throw in a\n * CommonJS project.\n */\nconst postcssConfigStub = `/**\n * Tailwind v4 runs as a PostCSS plugin. Vite loads this file automatically —\n * in dev and in build — so no Vite configuration is required.\n *\n * The plugin lives in its own package in v4: \\`tailwindcss\\` is the engine,\n * \\`@tailwindcss/postcss\\` is the adapter. Naming \\`tailwindcss\\` here directly is\n * the v3 spelling and will not work.\n */\nexport default {\n  plugins: {\n    \"@tailwindcss/postcss\": {},\n  },\n};\n`;\n\n/**\n * Every filename Vite/PostCSS will pick up from the project root.\n *\n * Checked as a set rather than just writing our own: two PostCSS configs in one\n * directory is not a merge, it is a coin toss over which one loads, so a project\n * that already has one gets instructions instead of a second file.\n */\nconst POSTCSS_CONFIG_FILES = [\n  \"postcss.config.mjs\",\n  \"postcss.config.js\",\n  \"postcss.config.cjs\",\n  \"postcss.config.ts\",\n  \"postcss.config.json\",\n  \".postcssrc\",\n  \".postcssrc.js\",\n  \".postcssrc.json\",\n];\n\n/** The side-effect import that pulls the stylesheet into the bundler graph. */\nconst APP_CSS_IMPORT = 'import \"./app.css\";';\n\n/**\n * Create `src/web/app.css` — the sentinel for \"this feature already ran\".\n *\n * Nothing in the project template creates this file (the scaffold ships a\n * static `public/home.css` instead), so its presence means `add tailwind` has\n * been here, and its contents may since have been edited into a real design\n * system. It is never rewritten.\n */\nasync function createStylesheet(): Promise<boolean> {\n  const cssFile = srcPath(\"web/app.css\");\n\n  if (await fileExistsAsync(cssFile)) {\n    console.log(`${colors.yellowBright(\"src/web/app.css\")} already exists, skipping...`);\n\n    return false;\n  }\n\n  await ensureDirectoryAsync(srcPath(\"web\"));\n  await putFileAsync(cssFile, appCssStub);\n  console.log(`${colors.green(\"✓\")} Created src/web/app.css`);\n\n  return true;\n}\n\n/**\n * Write `postcss.config.mjs`, unless the project already has a PostCSS config.\n *\n * An existing config is left completely alone. It is an app-owned build file\n * that may already register autoprefixer, nesting, or a CSS-modules pass, and\n * appending Tailwind to it by string surgery would be guessing at both its\n * module format and its plugin order.\n */\nasync function writePostcssConfig(): Promise<void> {\n  for (const name of POSTCSS_CONFIG_FILES) {\n    if (!(await fileExistsAsync(rootPath(name)))) continue;\n\n    const current = await getFileAsync(rootPath(name)).catch(() => \"\");\n\n    if (current.includes(\"@tailwindcss/postcss\")) {\n      console.log(`${colors.yellowBright(name)} already registers Tailwind, skipping...`);\n    } else {\n      console.log(\n        `${colors.yellowBright(\"!\")} ${colors.yellowBright(name)} already exists — add Tailwind to it yourself:\\n` +\n          `  plugins: { \"@tailwindcss/postcss\": {} }\\n` +\n          \"  Two PostCSS configs in one project is undefined behaviour, so this feature did not write a second one.\",\n      );\n    }\n\n    return;\n  }\n\n  await putFileAsync(rootPath(\"postcss.config.mjs\"), postcssConfigStub);\n  console.log(`${colors.green(\"✓\")} Created postcss.config.mjs`);\n}\n\n/**\n * Import the stylesheet from `src/web/root.tsx`.\n *\n * The root is the one module every SSR page renders through, so importing the\n * stylesheet there is what puts it in the client bundle for every route.\n *\n * `root.tsx` is guaranteed to exist by the time this runs: `requires: [\"web\"]`\n * makes the add command resolve `web` ahead of `tailwind` and run its\n * `onExecuting` first, and that is what creates the file. The check below is\n * therefore for a root a human has since moved or deleted — a case worth a\n * printed instruction, not a failure.\n */\nasync function importStylesheetFromRoot(): Promise<void> {\n  const rootFile = srcPath(\"web/root.tsx\");\n\n  if (!(await fileExistsAsync(rootFile))) {\n    console.log(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(\"src/web/root.tsx\")} not found — ` +\n        `add ${colors.yellowBright(APP_CSS_IMPORT)} to your application root yourself.\\n` +\n        \"  Until the stylesheet is imported from a module the bundler reaches, no Tailwind CSS is emitted.\",\n    );\n\n    return;\n  }\n\n  const current = await getFileAsync(rootFile);\n\n  // Matches the import whichever quote style and specifier the file uses, so a\n  // re-run against a hand-edited root does not stack a second copy.\n  if (/import\\s+[\"'].*app\\.css[\"']/.test(current)) {\n    console.log(`${colors.yellowBright(\"src/web/root.tsx\")} already imports app.css, skipping...`);\n\n    return;\n  }\n\n  // FIRST line, above the framework imports. A side-effect CSS import has no\n  // binding to order against, and putting it at the top keeps it from being\n  // swept away by an import sorter that only ranks module specifiers.\n  await putFileAsync(rootFile, `${APP_CSS_IMPORT}\\n${current}`);\n  console.log(`${colors.green(\"✓\")} Imported app.css in src/web/root.tsx`);\n}\n\n/**\n * Wire Tailwind v4 into the page layer.\n *\n * Three files, none of which needs `node_modules` to be populated: on the\n * `create-warlock` path this runs under `--no-install`, so the dependencies\n * declared below are only recorded in `package.json` and nothing here may\n * import, resolve, or execute Tailwind itself.\n */\nasync function completeTailwindInstallation(_options: CommandActionData) {\n  await createStylesheet();\n  await writePostcssConfig();\n  await importStylesheetFromRoot();\n}\n\nexport const tailwindFeature: FeatureDefinition = {\n  description:\n    \"Installs Tailwind CSS v4 for the SSR page layer. Creates src/web/app.css (the CSS-first config — v4 has no tailwind.config.js), imports it from src/web/root.tsx, and registers the engine through postcss.config.mjs, which Vite loads in dev and build alike.\",\n  // `web` owns root.tsx and the CSS pipeline that serves this stylesheet.\n  // Requiring it also fixes the order: the add command resolves requirements\n  // depth-first, so `web` scaffolds src/web before this feature writes into it.\n  requires: [\"web\"],\n  devDependencies: {\n    // Build-time only, both of them — Tailwind compiles to a plain stylesheet\n    // and nothing it ships is imported at runtime.\n    tailwindcss: \"^4.1.16\",\n    // The engine and its PostCSS adapter are separate packages in v4 and are\n    // released in lockstep; keep these two ranges identical.\n    \"@tailwindcss/postcss\": \"^4.1.16\",\n  },\n  onExecuting: completeTailwindInstallation,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCnB,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;AAsB1B,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,iBAAiB;;;;;;;;;AAUvB,eAAe,mBAAqC;CAClD,MAAM,UAAU,QAAQ,aAAa;CAErC,IAAI,MAAM,gBAAgB,OAAO,GAAG;EAClC,QAAQ,IAAI,GAAG,OAAO,aAAa,iBAAiB,EAAE,6BAA6B;EAEnF,OAAO;CACT;CAEA,MAAM,qBAAqB,QAAQ,KAAK,CAAC;CACzC,MAAM,aAAa,SAAS,UAAU;CACtC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yBAAyB;CAE1D,OAAO;AACT;;;;;;;;;AAUA,eAAe,qBAAoC;CACjD,KAAK,MAAM,QAAQ,sBAAsB;EACvC,IAAI,CAAE,MAAM,gBAAgB,SAAS,IAAI,CAAC,GAAI;EAI9C,KAAI,MAFkB,aAAa,SAAS,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAEtD,CAAC,SAAS,sBAAsB,GACzC,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,yCAAyC;OAElF,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,IAAI,EAAE,oMAG3D;EAGF;CACF;CAEA,MAAM,aAAa,SAAS,oBAAoB,GAAG,iBAAiB;CACpE,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,4BAA4B;AAC/D;;;;;;;;;;;;;AAcA,eAAe,2BAA0C;CACvD,MAAM,WAAW,QAAQ,cAAc;CAEvC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAAI;EACtC,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,kBAAkB,EAAE,mBAC9D,OAAO,aAAa,cAAc,EAAE,uIAE/C;EAEA;CACF;CAEA,MAAM,UAAU,MAAM,aAAa,QAAQ;CAI3C,IAAI,8BAA8B,KAAK,OAAO,GAAG;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,kBAAkB,EAAE,sCAAsC;EAE7F;CACF;CAKA,MAAM,aAAa,UAAU,GAAG,eAAe,IAAI,SAAS;CAC5D,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,sCAAsC;AACzE;;;;;;;;;AAUA,eAAe,6BAA6B,UAA6B;CACvE,MAAM,iBAAiB;CACvB,MAAM,mBAAmB;CACzB,MAAM,yBAAyB;AACjC;AAEA,MAAa,kBAAqC;CAChD,aACE;CAIF,UAAU,CAAC,KAAK;CAChB,iBAAiB;EAGf,aAAa;EAGb,wBAAwB;CAC1B;CACA,aAAa;AACf"}
+{"version":3,"file":"tailwind.feature.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/tailwind.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport type { FeatureDefinition } from \"./types\";\n\n/**\n * The stylesheet entry, and the whole of Tailwind's configuration.\n *\n * Tailwind v4 is CSS-first: there is no `tailwind.config.js` and no `content`\n * globs to keep in sync with the project layout — the engine discovers the\n * templates that reach it through the bundler graph, and everything a v3 config\n * held (`theme`, `plugins`, `darkMode`) is expressed in CSS beside the import.\n * So this one file is the config, which is why the feature writes it rather\n * than an `ejectConfig` entry: `ejectConfig` lands in `src/config/*.ts`, and a\n * stylesheet that must sit in the bundler's path does not belong there.\n */\nconst appCssStub = `@import \"tailwindcss\";\n\n/*\n  Tailwind v4 configures itself from CSS — there is no tailwind.config.js.\n\n  Design tokens go in an @theme block, and each one becomes both a CSS variable\n  and a utility class:\n\n    @theme {\n      --color-brand: oklch(0.62 0.19 259);\n      --font-display: \"Inter\", sans-serif;\n    }\n\n  gives you \\`bg-brand\\`, \\`text-brand\\`, \\`font-display\\` and \\`var(--color-brand)\\`.\n\n  Plugins are imported here too — \\`@plugin \"@tailwindcss/typography\";\\` — and\n  your own non-utility CSS can simply follow this comment.\n*/\n`;\n\n/**\n * PostCSS rather than a Vite config file, and deliberately at the project root.\n *\n * Vite discovers `postcss.config.mjs` from the project root on its own, in the\n * dev server and in `vite build` alike, without the application owning a Vite\n * config at all. That matters here: the only app-facing Vite plugin array in\n * this framework is `webConnector({ plugins })`, which is wired into the DEV\n * server exclusively — the client build composes its own plugin list from its\n * caller. Registering `@tailwindcss/vite` there would produce styles in `dev`\n * and silently drop them from a production build, which is a worse failure than\n * any config file, because it only shows up after deploy.\n *\n * `.mjs` because a Warlock project's `package.json` is not guaranteed to set\n * `\"type\": \"module\"`, and `export default` in a `.js` file would throw in a\n * CommonJS project.\n */\nconst postcssConfigStub = `/**\n * Tailwind v4 runs as a PostCSS plugin. Vite loads this file automatically —\n * in dev and in build — so no Vite configuration is required.\n *\n * The plugin lives in its own package in v4: \\`tailwindcss\\` is the engine,\n * \\`@tailwindcss/postcss\\` is the adapter. Naming \\`tailwindcss\\` here directly is\n * the v3 spelling and will not work.\n */\nexport default {\n  plugins: {\n    \"@tailwindcss/postcss\": {},\n  },\n};\n`;\n\n/**\n * Every filename Vite/PostCSS will pick up from the project root.\n *\n * Checked as a set rather than just writing our own: two PostCSS configs in one\n * directory is not a merge, it is a coin toss over which one loads, so a project\n * that already has one gets instructions instead of a second file.\n */\nconst POSTCSS_CONFIG_FILES = [\n  \"postcss.config.mjs\",\n  \"postcss.config.js\",\n  \"postcss.config.cjs\",\n  \"postcss.config.ts\",\n  \"postcss.config.json\",\n  \".postcssrc\",\n  \".postcssrc.js\",\n  \".postcssrc.json\",\n];\n\n/** The side-effect import that pulls the stylesheet into the bundler graph. */\nconst APP_CSS_IMPORT = 'import \"./app.css\";';\n\n/**\n * Create `src/web/app.css` — the sentinel for \"this feature already ran\".\n *\n * Nothing in the project template creates this file (the scaffold ships a\n * static `public/home.css` instead), so its presence means `add tailwind` has\n * been here, and its contents may since have been edited into a real design\n * system. It is never rewritten.\n */\nasync function createStylesheet(): Promise<boolean> {\n  const cssFile = srcPath(\"web/app.css\");\n\n  if (await fileExistsAsync(cssFile)) {\n    console.log(`${colors.yellowBright(\"src/web/app.css\")} already exists, skipping...`);\n\n    return false;\n  }\n\n  await ensureDirectoryAsync(srcPath(\"web\"));\n  await putFileAsync(cssFile, appCssStub);\n  console.log(`${colors.green(\"✓\")} Created src/web/app.css`);\n\n  return true;\n}\n\n/**\n * Write `postcss.config.mjs`, unless the project already has a PostCSS config.\n *\n * An existing config is left completely alone. It is an app-owned build file\n * that may already register autoprefixer, nesting, or a CSS-modules pass, and\n * appending Tailwind to it by string surgery would be guessing at both its\n * module format and its plugin order.\n */\nasync function writePostcssConfig(): Promise<void> {\n  for (const name of POSTCSS_CONFIG_FILES) {\n    if (!(await fileExistsAsync(rootPath(name)))) continue;\n\n    const current = await getFileAsync(rootPath(name)).catch(() => \"\");\n\n    if (current.includes(\"@tailwindcss/postcss\")) {\n      console.log(`${colors.yellowBright(name)} already registers Tailwind, skipping...`);\n    } else {\n      console.log(\n        `${colors.yellowBright(\"!\")} ${colors.yellowBright(name)} already exists — add Tailwind to it yourself:\\n` +\n          `  plugins: { \"@tailwindcss/postcss\": {} }\\n` +\n          \"  Two PostCSS configs in one project is undefined behaviour, so this feature did not write a second one.\",\n      );\n    }\n\n    return;\n  }\n\n  await putFileAsync(rootPath(\"postcss.config.mjs\"), postcssConfigStub);\n  console.log(`${colors.green(\"✓\")} Created postcss.config.mjs`);\n}\n\n/**\n * Import the stylesheet from `src/web/root.tsx`.\n *\n * The root is the one module every SSR page renders through, so importing the\n * stylesheet there is what puts it in the client bundle for every route.\n *\n * `root.tsx` is guaranteed to exist by the time this runs: `requires: [\"web\"]`\n * makes the add command resolve `web` ahead of `tailwind` and run its\n * `onExecuting` first, and that is what creates the file. The check below is\n * therefore for a root a human has since moved or deleted — a case worth a\n * printed instruction, not a failure.\n */\nasync function importStylesheetFromRoot(): Promise<void> {\n  const rootFile = srcPath(\"web/root.tsx\");\n\n  if (!(await fileExistsAsync(rootFile))) {\n    console.log(\n      `${colors.yellowBright(\"!\")} ${colors.yellowBright(\"src/web/root.tsx\")} not found — ` +\n        `add ${colors.yellowBright(APP_CSS_IMPORT)} to your application root yourself.\\n` +\n        \"  Until the stylesheet is imported from a module the bundler reaches, no Tailwind CSS is emitted.\",\n    );\n\n    return;\n  }\n\n  const current = await getFileAsync(rootFile);\n\n  // Matches the import whichever quote style and specifier the file uses, so a\n  // re-run against a hand-edited root does not stack a second copy.\n  if (/import\\s+[\"'].*app\\.css[\"']/.test(current)) {\n    console.log(`${colors.yellowBright(\"src/web/root.tsx\")} already imports app.css, skipping...`);\n\n    return;\n  }\n\n  // FIRST line, above the framework imports. A side-effect CSS import has no\n  // binding to order against, and putting it at the top keeps it from being\n  // swept away by an import sorter that only ranks module specifiers.\n  await putFileAsync(rootFile, `${APP_CSS_IMPORT}\\n${current}`);\n  console.log(`${colors.green(\"✓\")} Imported app.css in src/web/root.tsx`);\n}\n\n/**\n * Wire Tailwind v4 into the page layer.\n *\n * Three files, none of which needs `node_modules` to be populated: on the\n * `create-warlock` path this runs under `--no-install`, so the dependencies\n * declared below are only recorded in `package.json` and nothing here may\n * import, resolve, or execute Tailwind itself.\n */\nasync function completeTailwindInstallation(_options: CommandActionData) {\n  await createStylesheet();\n  await writePostcssConfig();\n  await importStylesheetFromRoot();\n}\n\nexport const tailwindFeature: FeatureDefinition = {\n  description:\n    \"Installs Tailwind CSS v4 for the SSR page layer. Creates src/web/app.css (the CSS-first config — v4 has no tailwind.config.js), imports it from src/web/root.tsx, and registers the engine through postcss.config.mjs, which Vite loads in dev and build alike.\",\n  // `web` owns root.tsx and the CSS pipeline that serves this stylesheet.\n  // Requiring it also fixes the order: the add command resolves requirements\n  // depth-first, so `web` scaffolds src/web before this feature writes into it.\n  requires: [\"web\"],\n  devDependencies: {\n    // Build-time only, both of them — Tailwind compiles to a plain stylesheet\n    // and nothing it ships is imported at runtime.\n    tailwindcss: \"^4.1.16\",\n    // The engine and its PostCSS adapter are separate packages in v4 and are\n    // released in lockstep; keep these two ranges identical.\n    \"@tailwindcss/postcss\": \"^4.1.16\",\n  },\n  onExecuting: completeTailwindInstallation,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCnB,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;AAsB1B,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,iBAAiB;;;;;;;;;AAUvB,eAAe,mBAAqC;CAClD,MAAM,UAAU,QAAQ,aAAa;CAErC,IAAI,MAAM,gBAAgB,OAAO,GAAG;EAClC,QAAQ,IAAI,GAAG,OAAO,aAAa,iBAAiB,EAAE,6BAA6B;EAEnF,OAAO;CACT;CAEA,MAAM,qBAAqB,QAAQ,KAAK,CAAC;CACzC,MAAM,aAAa,SAAS,UAAU;CACtC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yBAAyB;CAE1D,OAAO;AACT;;;;;;;;;AAUA,eAAe,qBAAoC;CACjD,KAAK,MAAM,QAAQ,sBAAsB;EACvC,IAAI,CAAE,MAAM,gBAAgB,SAAS,IAAI,CAAC,GAAI;EAI9C,KAAI,MAFkB,aAAa,SAAS,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAEtD,CAAC,SAAS,sBAAsB,GACzC,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,yCAAyC;OAElF,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,IAAI,EAAE,oMAG3D;EAGF;CACF;CAEA,MAAM,aAAa,SAAS,oBAAoB,GAAG,iBAAiB;CACpE,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,4BAA4B;AAC/D;;;;;;;;;;;;;AAcA,eAAe,2BAA0C;CACvD,MAAM,WAAW,QAAQ,cAAc;CAEvC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAAI;EACtC,QAAQ,IACN,GAAG,OAAO,aAAa,GAAG,EAAE,GAAG,OAAO,aAAa,kBAAkB,EAAE,mBAC9D,OAAO,aAAa,cAAc,EAAE,uIAE/C;EAEA;CACF;CAEA,MAAM,UAAU,MAAM,aAAa,QAAQ;CAI3C,IAAI,8BAA8B,KAAK,OAAO,GAAG;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,kBAAkB,EAAE,sCAAsC;EAE7F;CACF;CAKA,MAAM,aAAa,UAAU,GAAG,eAAe,IAAI,SAAS;CAC5D,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,sCAAsC;AACzE;;;;;;;;;AAUA,eAAe,6BAA6B,UAA6B;CACvE,MAAM,iBAAiB;CACvB,MAAM,mBAAmB;CACzB,MAAM,yBAAyB;AACjC;AAEA,MAAa,kBAAqC;CAChD,aACE;CAIF,UAAU,CAAC,KAAK;CAChB,iBAAiB;EAGf,aAAa;EAGb,wBAAwB;CAC1B;CACA,aAAa;AACf"}

package/esm/generations/features/test.feature.mjs

@@ -4,7 +4,7 @@ import { VITE_RANGE } from "./web.feature.mjs";
 import { colors } from "@mongez/copper";
 import { fileExistsAsync, putFileAsync } from "@warlock.js/fs";
 
-//#region ../core/src/generations/features/test.feature.ts
+//#region ../../packages/core/src/generations/features/test.feature.ts
 async function completeTestInstallation(options) {
 	const testGlobalSetupPath = srcPath("test-global-setup.ts");
 	if (!await fileExistsAsync(testGlobalSetupPath)) {

package/esm/generations/features/test.feature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"test.feature.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/test.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport type { FeatureDefinition } from \"./types\";\nimport { VITE_RANGE } from \"./web.feature\";\n\nasync function completeTestInstallation(options: CommandActionData) {\n  // Create test-global-setup.ts (runs once before all tests)\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\n\n  if (!testGlobalSetupExists) {\n    await putFileAsync(\n      testGlobalSetupPath,\n      `/**\n * Global Test Setup\n *\n * Runs ONCE before all test workers.\n * Starts the HTTP server for integration tests.\n */\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core/tests\";\n\nexport async function setup() {\n  await startHttpTestServer();\n}\n\nexport async function teardown() {\n  await stopHttpTestServer();\n}\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\n  }\n\n  // Create test-setup.ts (runs before EVERY test file)\n  const testSetupPath = srcPath(\"test-setup.ts\");\n  const testSetupExists = await fileExistsAsync(testSetupPath);\n\n  if (!testSetupExists) {\n    await putFileAsync(\n      testSetupPath,\n      `/**\n * Test Setup - runs before EVERY test file\n *\n * Vitest runs setupFiles before each test file and rebuilds the module\n * registry with it, so this pair boots and closes the test runtime once per\n * test file.\n *\n * setupTest() gets no connectors option on purpose: an explicit connectors\n * value outranks tests.connectors from src/config/tests.ts, so passing one\n * here would erase your project config. Omitting it leaves the config in\n * charge.\n *\n * importModule makes Warlock load your app modules (config, routes, ...)\n * through THIS file's import(), which Vitest handles. Tests and the framework\n * then share one copy of every class, so \"owner instanceof User\" works.\n *\n * afterAll(teardownTest) is the other half of the pair: whoever calls\n * setupTest() owns closing it in the same runtime context.\n */\nimport { setupTest, teardownTest } from \"@warlock.js/core/tests\";\nimport { afterAll } from \"vitest\";\n\nawait setupTest({ importModule: (file) => import(file) });\n\nafterAll(teardownTest);\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\n  }\n\n  // Create vite.config.ts\n  const viteConfigPath = rootPath(\"vite.config.ts\");\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\n\n  if (!viteConfigExists) {\n    await putFileAsync(\n      viteConfigPath,\n      `import { lowerStage3Decorators } from \"@warlock.js/core/vite\";\nimport mongezVite from \"@mongez/vite\";\nimport { defineConfig } from \"vitest/config\";\n\nexport default defineConfig({\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\n  // decorated Cascade models load under Vitest.\n  plugins: [lowerStage3Decorators(), mongezVite()],\n  test: {\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per test file\n    environment: \"node\",\n    globals: false,\n    include: [\"src/app/**/*.test.ts\"],\n  },\n});\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\n  }\n}\n\nexport const testFeature: FeatureDefinition = {\n  description: \"Installs warlock test for testing\",\n  onExecuting: completeTestInstallation,\n  script: {\n    test: \"vitest run\",\n    \"test:coverage\": \"vitest run --coverage\",\n    \"test:ui\": \"vitest --ui\",\n    \"test:watch\": \"vitest --watch\",\n  },\n  devDependencies: {\n    \"@mongez/vite\": \"^2.0.4\",\n    vite: VITE_RANGE,\n    vitest: \"^4.1.8\",\n    \"@vitest/coverage-v8\": \"^4.1.8\",\n  },\n};\n"],"mappings":";;;;;;;AAOA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,kCAAkC;CACrE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;;;;;;;;;;;;;;;;;CA0BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2BAA2B;CAC9D;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,wBAAwB;CAC3D;AACF;AAEA,MAAa,cAAiC;CAC5C,aAAa;CACb,aAAa;CACb,QAAQ;EACN,MAAM;EACN,iBAAiB;EACjB,WAAW;EACX,cAAc;CAChB;CACA,iBAAiB;EACf,gBAAgB;EAChB,MAAM;EACN,QAAQ;EACR,uBAAuB;CACzB;AACF"}
+{"version":3,"file":"test.feature.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/test.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { fileExistsAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport type { FeatureDefinition } from \"./types\";\nimport { VITE_RANGE } from \"./web.feature\";\n\nasync function completeTestInstallation(options: CommandActionData) {\n  // Create test-global-setup.ts (runs once before all tests)\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\n\n  if (!testGlobalSetupExists) {\n    await putFileAsync(\n      testGlobalSetupPath,\n      `/**\n * Global Test Setup\n *\n * Runs ONCE before all test workers.\n * Starts the HTTP server for integration tests.\n */\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core/tests\";\n\nexport async function setup() {\n  await startHttpTestServer();\n}\n\nexport async function teardown() {\n  await stopHttpTestServer();\n}\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\n  }\n\n  // Create test-setup.ts (runs before EVERY test file)\n  const testSetupPath = srcPath(\"test-setup.ts\");\n  const testSetupExists = await fileExistsAsync(testSetupPath);\n\n  if (!testSetupExists) {\n    await putFileAsync(\n      testSetupPath,\n      `/**\n * Test Setup - runs before EVERY test file\n *\n * Vitest runs setupFiles before each test file and rebuilds the module\n * registry with it, so this pair boots and closes the test runtime once per\n * test file.\n *\n * setupTest() gets no connectors option on purpose: an explicit connectors\n * value outranks tests.connectors from src/config/tests.ts, so passing one\n * here would erase your project config. Omitting it leaves the config in\n * charge.\n *\n * importModule makes Warlock load your app modules (config, routes, ...)\n * through THIS file's import(), which Vitest handles. Tests and the framework\n * then share one copy of every class, so \"owner instanceof User\" works.\n *\n * afterAll(teardownTest) is the other half of the pair: whoever calls\n * setupTest() owns closing it in the same runtime context.\n */\nimport { setupTest, teardownTest } from \"@warlock.js/core/tests\";\nimport { afterAll } from \"vitest\";\n\nawait setupTest({ importModule: (file) => import(file) });\n\nafterAll(teardownTest);\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\n  }\n\n  // Create vite.config.ts\n  const viteConfigPath = rootPath(\"vite.config.ts\");\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\n\n  if (!viteConfigExists) {\n    await putFileAsync(\n      viteConfigPath,\n      `import { lowerStage3Decorators } from \"@warlock.js/core/vite\";\nimport mongezVite from \"@mongez/vite\";\nimport { defineConfig } from \"vitest/config\";\n\nexport default defineConfig({\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\n  // decorated Cascade models load under Vitest.\n  plugins: [lowerStage3Decorators(), mongezVite()],\n  test: {\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per test file\n    environment: \"node\",\n    globals: false,\n    include: [\"src/app/**/*.test.ts\"],\n  },\n});\n`,\n    );\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\n  }\n}\n\nexport const testFeature: FeatureDefinition = {\n  description: \"Installs warlock test for testing\",\n  onExecuting: completeTestInstallation,\n  script: {\n    test: \"vitest run\",\n    \"test:coverage\": \"vitest run --coverage\",\n    \"test:ui\": \"vitest --ui\",\n    \"test:watch\": \"vitest --watch\",\n  },\n  devDependencies: {\n    \"@mongez/vite\": \"^2.0.4\",\n    vite: VITE_RANGE,\n    vitest: \"^4.1.8\",\n    \"@vitest/coverage-v8\": \"^4.1.8\",\n  },\n};\n"],"mappings":";;;;;;;AAOA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,kCAAkC;CACrE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;;;;;;;;;;;;;;;;;CA0BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,2BAA2B;CAC9D;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,wBAAwB;CAC3D;AACF;AAEA,MAAa,cAAiC;CAC5C,aAAa;CACb,aAAa;CACb,QAAQ;EACN,MAAM;EACN,iBAAiB;EACjB,WAAW;EACX,cAAc;CAChB;CACA,iBAAiB;EACf,gBAAgB;EAChB,MAAM;EACN,QAAQ;EACR,uBAAuB;CACzB;AACF"}

package/esm/generations/features/types.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/generations/features/types.ts
+//#region ../../packages/core/src/generations/features/types.ts
 /**
 * Internal placeholder for an @warlock.js dependency whose concrete version
 * comes from the installed Core package at command execution time.

package/esm/generations/features/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/types.ts"],"sourcesContent":["import type { CommandActionData } from \"../../commands/types\";\n\n/**\n * Internal placeholder for an @warlock.js dependency whose concrete version\n * comes from the installed Core package at command execution time.\n *\n * This is deliberately not a valid package-manager range. If a future code\n * path forgets to resolve it, installation fails loudly instead of silently\n * falling back to a stale framework major copied into a feature definition.\n */\nexport const INSTALLED_WARLOCK_VERSION = \"__INSTALLED_WARLOCK_VERSION__\";\n\n/**\n * One entry in the feature registry.\n *\n * Every feature owns a module of its own that exports a single value of this\n * shape, with its `onExecuting` body beside it; `features/index.ts` is only the\n * ordered index that collects them.\n */\nexport type FeatureDefinition = {\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  description: string;\n  requires?: string[];\n  script?: Record<string, string>;\n  onExecuting?: (options: CommandActionData) => Promise<any>;\n  ejectConfig?: {\n    content: string;\n    name: string;\n  };\n};\n"],"mappings":";;;;;;;;;AAUA,MAAa,4BAA4B"}
+{"version":3,"file":"types.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/types.ts"],"sourcesContent":["import type { CommandActionData } from \"../../commands/types\";\n\n/**\n * Internal placeholder for an @warlock.js dependency whose concrete version\n * comes from the installed Core package at command execution time.\n *\n * This is deliberately not a valid package-manager range. If a future code\n * path forgets to resolve it, installation fails loudly instead of silently\n * falling back to a stale framework major copied into a feature definition.\n */\nexport const INSTALLED_WARLOCK_VERSION = \"__INSTALLED_WARLOCK_VERSION__\";\n\n/**\n * One entry in the feature registry.\n *\n * Every feature owns a module of its own that exports a single value of this\n * shape, with its `onExecuting` body beside it; `features/index.ts` is only the\n * ordered index that collects them.\n */\nexport type FeatureDefinition = {\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  description: string;\n  requires?: string[];\n  script?: Record<string, string>;\n  onExecuting?: (options: CommandActionData) => Promise<any>;\n  ejectConfig?: {\n    content: string;\n    name: string;\n  };\n};\n"],"mappings":";;;;;;;;;AAUA,MAAa,4BAA4B"}

package/esm/generations/features/web.feature.mjs

@@ -8,7 +8,7 @@ import { resolveContactScaffold } from "./shared/resolve-contact-scaffold.mjs";
 import { colors } from "@mongez/copper";
 import { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from "@warlock.js/fs";
 
-//#region ../core/src/generations/features/web.feature.ts
+//#region ../../packages/core/src/generations/features/web.feature.ts
 /** The one vite range shared by every feature (web's peer range is `>=7.3.5 <8`). */
 const VITE_RANGE = "^7.3.5";
 /**

package/esm/generations/features/web.feature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"web.feature.mjs","names":[],"sources":["../../../../../../../../core/src/generations/features/web.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport { insertConnectorEntry } from \"./shared/insert-connector-entry\";\nimport { relocateConflictingHomeRoute } from \"./shared/relocate-conflicting-home-route\";\nimport { resolveContactScaffold } from \"./shared/resolve-contact-scaffold\";\nimport {\n  webContactControllerStub,\n  webContactRoutesStub,\n  webHomePageStub,\n  webHomeRegisterStub,\n  webRootStub,\n} from \"../stubs\";\nimport { type FeatureDefinition, INSTALLED_WARLOCK_VERSION } from \"./types\";\n\n/** The one vite range shared by every feature (web's peer range is `>=7.3.5 <8`). */\nexport const VITE_RANGE = \"^7.3.5\";\n\n/**\n * Register the WebConnector in `warlock.config.ts`, and ONLY there.\n *\n * It belongs to the config array or to app code, never both. Both halves are\n * registered before app code loads — the CLI preloader in dev, the generated\n * entry in production — so also calling `connectorsManager.register(...)` in\n * `src/app/main.ts` boots the connector twice and installs every page route\n * twice. That surfaces at PRODUCTION boot as `Route name \"...\" is already\n * taken`, because pages and API routes share one route-name namespace.\n *\n * The config array is the half to prefer: `warlock build` reads the same array\n * to drain each connector's build contribution, so \"built for\" and \"boots with\"\n * cannot drift.\n *\n * String surgery rather than a TypeScript parse: `warlock.config.ts` is an\n * app-owned file that may carry any formatting, and a parse-and-print would\n * reformat the parts we did not come to change.\n */\nasync function registerWebConnector(): Promise<void> {\n  const configPath = rootPath(\"warlock.config.ts\");\n\n  if (!(await fileExistsAsync(configPath))) {\n    console.log(\n      `${colors.yellowBright(\"warlock.config.ts\")} not found — add this yourself:\\n` +\n        `  import { webConnector } from \"@warlock.js/web/connector\";\\n` +\n        `  export default defineConfig({ connectors: [webConnector()] });`,\n    );\n\n    return;\n  }\n\n  const current = await getFileAsync(configPath);\n\n  if (current.includes(\"webConnector\")) {\n    console.log(`${colors.yellowBright(\"webConnector\")} already registered, skipping...`);\n\n    return;\n  }\n\n  const importLine = 'import { webConnector } from \"@warlock.js/web/connector\";';\n  let next = current.includes(importLine) ? current : `${importLine}\\n${current}`;\n\n  // An existing `connectors: [` gains one entry; otherwise the key is added to\n  // the object `defineConfig` receives.\n  const insertion = insertConnectorEntry(next, \"webConnector()\");\n\n  if (insertion.status === \"already-present\") {\n    return;\n  }\n\n  if (insertion.status === \"added\") {\n    next = insertion.next;\n  } else if (next.includes(\"defineConfig({\")) {\n    next = next.replace(\"defineConfig({\", \"defineConfig({\\n  connectors: [webConnector()],\");\n  } else {\n    console.log(\n      `${colors.yellowBright(\"warlock.config.ts\")} has no recognisable defineConfig({...}) — ` +\n        \"add `connectors: [webConnector()]` yourself.\",\n    );\n\n    return;\n  }\n\n  await putFileAsync(configPath, next);\n  console.log(`${colors.green(\"✓\")} Registered webConnector in warlock.config.ts`);\n}\n\n/**\n * Scaffold the smallest page layer that renders, and register the connector.\n *\n * `src/web/root.tsx` is the sentinel for \"already scaffolded\" — the framework\n * ships a default root, so its presence means a human has been here.\n */\nasync function completeWebInstallation(_options: CommandActionData) {\n  const rootFile = srcPath(\"web/root.tsx\");\n\n  if (await fileExistsAsync(rootFile)) {\n    console.log(`${colors.yellowBright(\"src/web\")} already scaffolded, skipping...`);\n  } else {\n    await ensureDirectoryAsync(srcPath(\"web\"));\n    await putFileAsync(rootFile, webRootStub);\n    console.log(`${colors.green(\"✓\")} Created src/web/root.tsx`);\n\n    const collision = await relocateConflictingHomeRoute();\n\n    if (collision.outcome === \"relocated\") {\n      console.log(\n        `${colors.green(\"✓\")} Moved the existing ${colors.yellowBright('GET \"/\"')} route to ` +\n          `${colors.yellowBright('\"/welcome\"')} in ${colors.yellowBright(`src/${collision.relativePath}`)} — ` +\n          \"the new page owns `/` now, and the JSON welcome route still answers at /welcome.\",\n      );\n    }\n\n    // The page is written ONLY when `/` is provably free. Writing it while\n    // another handler holds `/` produces a homepage that 500s on first request,\n    // which is precisely the outcome a scaffolder must never hand back.\n    if (collision.outcome === \"conflict\" || collision.outcome === \"failed\") {\n      const verb =\n        collision.outcome === \"failed\" ? colors.redBright(\"✗\") : colors.yellowBright(\"!\");\n\n      console.log(\n        `${verb} Did not create src/web/index.page.tsx: ${collision.reason}.\\n` +\n          `  The page stub declares ${colors.yellowBright('route.path = \"/\"')}, and two handlers on one ` +\n          \"path is a 500 at request time, not a startup error.\\n\" +\n          `  Free up ${colors.yellowBright('GET \"/\"')} under src/app — move it to a path of its own, ` +\n          \"or remove it — then create src/web/index.page.tsx yourself. Giving the page a `route` other \" +\n          \"than `/` works too.\",\n      );\n\n      // Non-zero on BOTH branches. The page layer this command exists to\n      // scaffold was not scaffolded, and a 0 here is the exact \"looked like it\n      // worked\" signal that put `/` in this state to begin with — a conflict we\n      // declined to guess at is still an incomplete install, not a success.\n      //\n      // `exitCode` rather than `exit(1)`: the connector below still has to be\n      // registered, and any other feature in the same `warlock add` invocation\n      // still has to install, or the project is left half-wired on top of this.\n      process.exitCode = 1;\n    } else {\n      await putFileAsync(srcPath(\"web/index.page.tsx\"), webHomePageStub);\n      await putFileAsync(srcPath(\"web/index.register.ts\"), webHomeRegisterStub);\n\n      // Unlike root.tsx above, the contact controller and its routes file are\n      // ordinary application files a project can already have — independently\n      // of ever having run `warlock add web`. Each is guarded on its OWN\n      // existence, not on the (already-consumed) root.tsx sentinel, so an\n      // existing `contact` module is skipped rather than clobbered. See\n      // resolveContactScaffold's doc comment for why.\n      const contactPlan = resolveContactScaffold({\n        controllerExists: await fileExistsAsync(\n          srcPath(\"app/contact/controllers/contact.controller.ts\"),\n        ),\n        routesExists: await fileExistsAsync(srcPath(\"app/contact/routes.ts\")),\n      });\n\n      if (contactPlan.writeController) {\n        await ensureDirectoryAsync(srcPath(\"app/contact/controllers\"));\n        await putFileAsync(\n          srcPath(\"app/contact/controllers/contact.controller.ts\"),\n          webContactControllerStub,\n        );\n      }\n\n      if (contactPlan.writeRoutes) {\n        await ensureDirectoryAsync(srcPath(\"app/contact\"));\n        await putFileAsync(srcPath(\"app/contact/routes.ts\"), webContactRoutesStub);\n      }\n\n      console.log(`${colors.green(\"✓\")} Created src/web/index.page.tsx`);\n\n      for (const message of contactPlan.messages) {\n        console.log(message);\n      }\n    }\n  }\n\n  await registerWebConnector();\n}\n\nexport const webFeature: FeatureDefinition = {\n  description:\n    \"Installs @warlock.js/web — SSR React pages served by the Warlock HTTP server. Scaffolds src/web (root.tsx + a home page) and registers the WebConnector in warlock.config.ts. Pages are opt-in: a Warlock app is an API until you add this.\",\n  dependencies: {\n    \"@warlock.js/web\": INSTALLED_WARLOCK_VERSION,\n    \"@mongez/http\": \"^3.5.0\",\n    \"@mongez/react-form\": \"^4.0.0\",\n    \"@mongez/react-localization\": \"^3.4.7\",\n    react: \"^19.2.3\",\n    \"react-dom\": \"^19.2.3\",\n  },\n  devDependencies: {\n    \"@types/react\": \"^19.2.7\",\n    \"@types/react-dom\": \"^19.2.3\",\n    // Loaded through `await import()` by the dev server only, so both are\n    // optional peers of `web` rather than hard dependencies.\n    vite: VITE_RANGE,\n    \"@vitejs/plugin-react\": \"^5.2.0\",\n  },\n  onExecuting: completeWebInstallation,\n};\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,aAAa;;;;;;;;;;;;;;;;;;;AAoB1B,eAAe,uBAAsC;CACnD,MAAM,aAAa,SAAS,mBAAmB;CAE/C,IAAI,CAAE,MAAM,gBAAgB,UAAU,GAAI;EACxC,QAAQ,IACN,GAAG,OAAO,aAAa,mBAAmB,EAAE,+JAG9C;EAEA;CACF;CAEA,MAAM,UAAU,MAAM,aAAa,UAAU;CAE7C,IAAI,QAAQ,SAAS,cAAc,GAAG;EACpC,QAAQ,IAAI,GAAG,OAAO,aAAa,cAAc,EAAE,iCAAiC;EAEpF;CACF;CAEA,MAAM,aAAa;CACnB,IAAI,OAAO,QAAQ,SAAS,UAAU,IAAI,UAAU,GAAG,WAAW,IAAI;CAItE,MAAM,YAAY,qBAAqB,MAAM,gBAAgB;CAE7D,IAAI,UAAU,WAAW,mBACvB;CAGF,IAAI,UAAU,WAAW,SACvB,OAAO,UAAU;MACZ,IAAI,KAAK,SAAS,gBAAgB,GACvC,OAAO,KAAK,QAAQ,kBAAkB,iDAAiD;MAClF;EACL,QAAQ,IACN,GAAG,OAAO,aAAa,mBAAmB,EAAE,0FAE9C;EAEA;CACF;CAEA,MAAM,aAAa,YAAY,IAAI;CACnC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,8CAA8C;AACjF;;;;;;;AAQA,eAAe,wBAAwB,UAA6B;CAClE,MAAM,WAAW,QAAQ,cAAc;CAEvC,IAAI,MAAM,gBAAgB,QAAQ,GAChC,QAAQ,IAAI,GAAG,OAAO,aAAa,SAAS,EAAE,iCAAiC;MAC1E;EACL,MAAM,qBAAqB,QAAQ,KAAK,CAAC;EACzC,MAAM,aAAa,UAAU,WAAW;EACxC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,0BAA0B;EAE3D,MAAM,YAAY,MAAM,6BAA6B;EAErD,IAAI,UAAU,YAAY,aACxB,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sBAAsB,OAAO,aAAa,WAAS,EAAE,YACrE,OAAO,aAAa,cAAY,EAAE,MAAM,OAAO,aAAa,OAAO,UAAU,cAAc,EAAE,sFAEpG;EAMF,IAAI,UAAU,YAAY,cAAc,UAAU,YAAY,UAAU;GACtE,MAAM,OACJ,UAAU,YAAY,WAAW,OAAO,UAAU,GAAG,IAAI,OAAO,aAAa,GAAG;GAElF,QAAQ,IACN,GAAG,KAAK,0CAA0C,UAAU,OAAO,8BACrC,OAAO,aAAa,oBAAkB,EAAE;YAEvD,OAAO,aAAa,WAAS,EAAE,mKAGhD;GAUA,QAAQ,WAAW;EACrB,OAAO;GACL,MAAM,aAAa,QAAQ,oBAAoB,GAAG,eAAe;GACjE,MAAM,aAAa,QAAQ,uBAAuB,GAAG,mBAAmB;GAQxE,MAAM,cAAc,uBAAuB;IACzC,kBAAkB,MAAM,gBACtB,QAAQ,+CAA+C,CACzD;IACA,cAAc,MAAM,gBAAgB,QAAQ,uBAAuB,CAAC;GACtE,CAAC;GAED,IAAI,YAAY,iBAAiB;IAC/B,MAAM,qBAAqB,QAAQ,yBAAyB,CAAC;IAC7D,MAAM,aACJ,QAAQ,+CAA+C,GACvD,wBACF;GACF;GAEA,IAAI,YAAY,aAAa;IAC3B,MAAM,qBAAqB,QAAQ,aAAa,CAAC;IACjD,MAAM,aAAa,QAAQ,uBAAuB,GAAG,oBAAoB;GAC3E;GAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gCAAgC;GAEjE,KAAK,MAAM,WAAW,YAAY,UAChC,QAAQ,IAAI,OAAO;EAEvB;CACF;CAEA,MAAM,qBAAqB;AAC7B;AAEA,MAAa,aAAgC;CAC3C,aACE;CACF,cAAc;EACZ,mBAAmB;EACnB,gBAAgB;EAChB,sBAAsB;EACtB,8BAA8B;EAC9B,OAAO;EACP,aAAa;CACf;CACA,iBAAiB;EACf,gBAAgB;EAChB,oBAAoB;EAGpB,MAAM;EACN,wBAAwB;CAC1B;CACA,aAAa;AACf"}
+{"version":3,"file":"web.feature.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/generations/features/web.feature.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ensureDirectoryAsync, fileExistsAsync, getFileAsync, putFileAsync } from \"@warlock.js/fs\";\nimport type { CommandActionData } from \"../../commands/types\";\nimport { rootPath, srcPath } from \"../../utils\";\nimport { insertConnectorEntry } from \"./shared/insert-connector-entry\";\nimport { relocateConflictingHomeRoute } from \"./shared/relocate-conflicting-home-route\";\nimport { resolveContactScaffold } from \"./shared/resolve-contact-scaffold\";\nimport {\n  webContactControllerStub,\n  webContactRoutesStub,\n  webHomePageStub,\n  webHomeRegisterStub,\n  webRootStub,\n} from \"../stubs\";\nimport { type FeatureDefinition, INSTALLED_WARLOCK_VERSION } from \"./types\";\n\n/** The one vite range shared by every feature (web's peer range is `>=7.3.5 <8`). */\nexport const VITE_RANGE = \"^7.3.5\";\n\n/**\n * Register the WebConnector in `warlock.config.ts`, and ONLY there.\n *\n * It belongs to the config array or to app code, never both. Both halves are\n * registered before app code loads — the CLI preloader in dev, the generated\n * entry in production — so also calling `connectorsManager.register(...)` in\n * `src/app/main.ts` boots the connector twice and installs every page route\n * twice. That surfaces at PRODUCTION boot as `Route name \"...\" is already\n * taken`, because pages and API routes share one route-name namespace.\n *\n * The config array is the half to prefer: `warlock build` reads the same array\n * to drain each connector's build contribution, so \"built for\" and \"boots with\"\n * cannot drift.\n *\n * String surgery rather than a TypeScript parse: `warlock.config.ts` is an\n * app-owned file that may carry any formatting, and a parse-and-print would\n * reformat the parts we did not come to change.\n */\nasync function registerWebConnector(): Promise<void> {\n  const configPath = rootPath(\"warlock.config.ts\");\n\n  if (!(await fileExistsAsync(configPath))) {\n    console.log(\n      `${colors.yellowBright(\"warlock.config.ts\")} not found — add this yourself:\\n` +\n        `  import { webConnector } from \"@warlock.js/web/connector\";\\n` +\n        `  export default defineConfig({ connectors: [webConnector()] });`,\n    );\n\n    return;\n  }\n\n  const current = await getFileAsync(configPath);\n\n  if (current.includes(\"webConnector\")) {\n    console.log(`${colors.yellowBright(\"webConnector\")} already registered, skipping...`);\n\n    return;\n  }\n\n  const importLine = 'import { webConnector } from \"@warlock.js/web/connector\";';\n  let next = current.includes(importLine) ? current : `${importLine}\\n${current}`;\n\n  // An existing `connectors: [` gains one entry; otherwise the key is added to\n  // the object `defineConfig` receives.\n  const insertion = insertConnectorEntry(next, \"webConnector()\");\n\n  if (insertion.status === \"already-present\") {\n    return;\n  }\n\n  if (insertion.status === \"added\") {\n    next = insertion.next;\n  } else if (next.includes(\"defineConfig({\")) {\n    next = next.replace(\"defineConfig({\", \"defineConfig({\\n  connectors: [webConnector()],\");\n  } else {\n    console.log(\n      `${colors.yellowBright(\"warlock.config.ts\")} has no recognisable defineConfig({...}) — ` +\n        \"add `connectors: [webConnector()]` yourself.\",\n    );\n\n    return;\n  }\n\n  await putFileAsync(configPath, next);\n  console.log(`${colors.green(\"✓\")} Registered webConnector in warlock.config.ts`);\n}\n\n/**\n * Scaffold the smallest page layer that renders, and register the connector.\n *\n * `src/web/root.tsx` is the sentinel for \"already scaffolded\" — the framework\n * ships a default root, so its presence means a human has been here.\n */\nasync function completeWebInstallation(_options: CommandActionData) {\n  const rootFile = srcPath(\"web/root.tsx\");\n\n  if (await fileExistsAsync(rootFile)) {\n    console.log(`${colors.yellowBright(\"src/web\")} already scaffolded, skipping...`);\n  } else {\n    await ensureDirectoryAsync(srcPath(\"web\"));\n    await putFileAsync(rootFile, webRootStub);\n    console.log(`${colors.green(\"✓\")} Created src/web/root.tsx`);\n\n    const collision = await relocateConflictingHomeRoute();\n\n    if (collision.outcome === \"relocated\") {\n      console.log(\n        `${colors.green(\"✓\")} Moved the existing ${colors.yellowBright('GET \"/\"')} route to ` +\n          `${colors.yellowBright('\"/welcome\"')} in ${colors.yellowBright(`src/${collision.relativePath}`)} — ` +\n          \"the new page owns `/` now, and the JSON welcome route still answers at /welcome.\",\n      );\n    }\n\n    // The page is written ONLY when `/` is provably free. Writing it while\n    // another handler holds `/` produces a homepage that 500s on first request,\n    // which is precisely the outcome a scaffolder must never hand back.\n    if (collision.outcome === \"conflict\" || collision.outcome === \"failed\") {\n      const verb =\n        collision.outcome === \"failed\" ? colors.redBright(\"✗\") : colors.yellowBright(\"!\");\n\n      console.log(\n        `${verb} Did not create src/web/index.page.tsx: ${collision.reason}.\\n` +\n          `  The page stub declares ${colors.yellowBright('route.path = \"/\"')}, and two handlers on one ` +\n          \"path is a 500 at request time, not a startup error.\\n\" +\n          `  Free up ${colors.yellowBright('GET \"/\"')} under src/app — move it to a path of its own, ` +\n          \"or remove it — then create src/web/index.page.tsx yourself. Giving the page a `route` other \" +\n          \"than `/` works too.\",\n      );\n\n      // Non-zero on BOTH branches. The page layer this command exists to\n      // scaffold was not scaffolded, and a 0 here is the exact \"looked like it\n      // worked\" signal that put `/` in this state to begin with — a conflict we\n      // declined to guess at is still an incomplete install, not a success.\n      //\n      // `exitCode` rather than `exit(1)`: the connector below still has to be\n      // registered, and any other feature in the same `warlock add` invocation\n      // still has to install, or the project is left half-wired on top of this.\n      process.exitCode = 1;\n    } else {\n      await putFileAsync(srcPath(\"web/index.page.tsx\"), webHomePageStub);\n      await putFileAsync(srcPath(\"web/index.register.ts\"), webHomeRegisterStub);\n\n      // Unlike root.tsx above, the contact controller and its routes file are\n      // ordinary application files a project can already have — independently\n      // of ever having run `warlock add web`. Each is guarded on its OWN\n      // existence, not on the (already-consumed) root.tsx sentinel, so an\n      // existing `contact` module is skipped rather than clobbered. See\n      // resolveContactScaffold's doc comment for why.\n      const contactPlan = resolveContactScaffold({\n        controllerExists: await fileExistsAsync(\n          srcPath(\"app/contact/controllers/contact.controller.ts\"),\n        ),\n        routesExists: await fileExistsAsync(srcPath(\"app/contact/routes.ts\")),\n      });\n\n      if (contactPlan.writeController) {\n        await ensureDirectoryAsync(srcPath(\"app/contact/controllers\"));\n        await putFileAsync(\n          srcPath(\"app/contact/controllers/contact.controller.ts\"),\n          webContactControllerStub,\n        );\n      }\n\n      if (contactPlan.writeRoutes) {\n        await ensureDirectoryAsync(srcPath(\"app/contact\"));\n        await putFileAsync(srcPath(\"app/contact/routes.ts\"), webContactRoutesStub);\n      }\n\n      console.log(`${colors.green(\"✓\")} Created src/web/index.page.tsx`);\n\n      for (const message of contactPlan.messages) {\n        console.log(message);\n      }\n    }\n  }\n\n  await registerWebConnector();\n}\n\nexport const webFeature: FeatureDefinition = {\n  description:\n    \"Installs @warlock.js/web — SSR React pages served by the Warlock HTTP server. Scaffolds src/web (root.tsx + a home page) and registers the WebConnector in warlock.config.ts. Pages are opt-in: a Warlock app is an API until you add this.\",\n  dependencies: {\n    \"@warlock.js/web\": INSTALLED_WARLOCK_VERSION,\n    \"@mongez/http\": \"^3.5.0\",\n    \"@mongez/react-form\": \"^4.0.0\",\n    \"@mongez/react-localization\": \"^3.4.7\",\n    react: \"^19.2.3\",\n    \"react-dom\": \"^19.2.3\",\n  },\n  devDependencies: {\n    \"@types/react\": \"^19.2.7\",\n    \"@types/react-dom\": \"^19.2.3\",\n    // Loaded through `await import()` by the dev server only, so both are\n    // optional peers of `web` rather than hard dependencies.\n    vite: VITE_RANGE,\n    \"@vitejs/plugin-react\": \"^5.2.0\",\n  },\n  onExecuting: completeWebInstallation,\n};\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,aAAa;;;;;;;;;;;;;;;;;;;AAoB1B,eAAe,uBAAsC;CACnD,MAAM,aAAa,SAAS,mBAAmB;CAE/C,IAAI,CAAE,MAAM,gBAAgB,UAAU,GAAI;EACxC,QAAQ,IACN,GAAG,OAAO,aAAa,mBAAmB,EAAE,+JAG9C;EAEA;CACF;CAEA,MAAM,UAAU,MAAM,aAAa,UAAU;CAE7C,IAAI,QAAQ,SAAS,cAAc,GAAG;EACpC,QAAQ,IAAI,GAAG,OAAO,aAAa,cAAc,EAAE,iCAAiC;EAEpF;CACF;CAEA,MAAM,aAAa;CACnB,IAAI,OAAO,QAAQ,SAAS,UAAU,IAAI,UAAU,GAAG,WAAW,IAAI;CAItE,MAAM,YAAY,qBAAqB,MAAM,gBAAgB;CAE7D,IAAI,UAAU,WAAW,mBACvB;CAGF,IAAI,UAAU,WAAW,SACvB,OAAO,UAAU;MACZ,IAAI,KAAK,SAAS,gBAAgB,GACvC,OAAO,KAAK,QAAQ,kBAAkB,iDAAiD;MAClF;EACL,QAAQ,IACN,GAAG,OAAO,aAAa,mBAAmB,EAAE,0FAE9C;EAEA;CACF;CAEA,MAAM,aAAa,YAAY,IAAI;CACnC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,8CAA8C;AACjF;;;;;;;AAQA,eAAe,wBAAwB,UAA6B;CAClE,MAAM,WAAW,QAAQ,cAAc;CAEvC,IAAI,MAAM,gBAAgB,QAAQ,GAChC,QAAQ,IAAI,GAAG,OAAO,aAAa,SAAS,EAAE,iCAAiC;MAC1E;EACL,MAAM,qBAAqB,QAAQ,KAAK,CAAC;EACzC,MAAM,aAAa,UAAU,WAAW;EACxC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,0BAA0B;EAE3D,MAAM,YAAY,MAAM,6BAA6B;EAErD,IAAI,UAAU,YAAY,aACxB,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sBAAsB,OAAO,aAAa,WAAS,EAAE,YACrE,OAAO,aAAa,cAAY,EAAE,MAAM,OAAO,aAAa,OAAO,UAAU,cAAc,EAAE,sFAEpG;EAMF,IAAI,UAAU,YAAY,cAAc,UAAU,YAAY,UAAU;GACtE,MAAM,OACJ,UAAU,YAAY,WAAW,OAAO,UAAU,GAAG,IAAI,OAAO,aAAa,GAAG;GAElF,QAAQ,IACN,GAAG,KAAK,0CAA0C,UAAU,OAAO,8BACrC,OAAO,aAAa,oBAAkB,EAAE;YAEvD,OAAO,aAAa,WAAS,EAAE,mKAGhD;GAUA,QAAQ,WAAW;EACrB,OAAO;GACL,MAAM,aAAa,QAAQ,oBAAoB,GAAG,eAAe;GACjE,MAAM,aAAa,QAAQ,uBAAuB,GAAG,mBAAmB;GAQxE,MAAM,cAAc,uBAAuB;IACzC,kBAAkB,MAAM,gBACtB,QAAQ,+CAA+C,CACzD;IACA,cAAc,MAAM,gBAAgB,QAAQ,uBAAuB,CAAC;GACtE,CAAC;GAED,IAAI,YAAY,iBAAiB;IAC/B,MAAM,qBAAqB,QAAQ,yBAAyB,CAAC;IAC7D,MAAM,aACJ,QAAQ,+CAA+C,GACvD,wBACF;GACF;GAEA,IAAI,YAAY,aAAa;IAC3B,MAAM,qBAAqB,QAAQ,aAAa,CAAC;IACjD,MAAM,aAAa,QAAQ,uBAAuB,GAAG,oBAAoB;GAC3E;GAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gCAAgC;GAEjE,KAAK,MAAM,WAAW,YAAY,UAChC,QAAQ,IAAI,OAAO;EAEvB;CACF;CAEA,MAAM,qBAAqB;AAC7B;AAEA,MAAa,aAAgC;CAC3C,aACE;CACF,cAAc;EACZ,mBAAmB;EACnB,gBAAgB;EAChB,sBAAsB;EACtB,8BAA8B;EAC9B,OAAO;EACP,aAAa;CACf;CACA,iBAAiB;EACf,gBAAgB;EAChB,oBAAoB;EAGpB,MAAM;EACN,wBAAwB;CAC1B;CACA,aAAa;AACf"}

package/esm/generations/pnpm-build-approvals.mjs

@@ -1,5 +1,91 @@
-//#region ../core/src/generations/pnpm-build-approvals.ts
-/** Keep pnpm 11 native build approval local to the feature installer. */
+import path from "node:path";
+import { existsSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+
+//#region ../../packages/core/src/generations/pnpm-build-approvals.ts
+function pnpmBuildApprovalLayout(version) {
+	const match = /^(\d+)\.(\d+)\./.exec(version?.trim() ?? "");
+	if (!match) return "allowBuilds";
+	const major = Number(match[1]);
+	const minor = Number(match[2]);
+	if (major < 10 || major === 10 && minor < 5) return "packageJson";
+	if (major === 10 && minor < 26) return "onlyBuiltDependencies";
+	return "allowBuilds";
+}
+/**
+* The installed pnpm's version, or `undefined` when it cannot be read.
+*/
+function getPnpmVersion(cwd) {
+	try {
+		return execFileSync("pnpm", ["--version"], {
+			cwd,
+			encoding: "utf8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			],
+			timeout: 15e3,
+			shell: process.platform === "win32"
+		}).trim();
+	} catch {
+		return;
+	}
+}
+/**
+* True when a directory ABOVE `projectRoot` holds a `pnpm-workspace.yaml`: the
+* app is a member of a parent workspace, which owns the build-approval policy.
+*/
+function isInsideParentPnpmWorkspace(projectRoot) {
+	let dir = path.dirname(path.resolve(projectRoot));
+	while (true) {
+		if (existsSync(path.join(dir, "pnpm-workspace.yaml"))) return true;
+		const parent = path.dirname(dir);
+		if (parent === dir) return false;
+		dir = parent;
+	}
+}
+/**
+* Add packages to `pnpm.onlyBuiltDependencies` in a parsed package.json,
+* keeping existing entries and their order.
+*/
+function mergePackageJsonBuildApprovals(packageJson, packages) {
+	const pnpm = packageJson.pnpm ?? {};
+	const current = Array.isArray(pnpm.onlyBuiltDependencies) ? pnpm.onlyBuiltDependencies : [];
+	const merged = [...current, ...packages.filter((name) => !current.includes(name))];
+	return {
+		...packageJson,
+		pnpm: {
+			...pnpm,
+			onlyBuiltDependencies: merged
+		}
+	};
+}
+/**
+* Add packages to a block-style `onlyBuiltDependencies:` list in a workspace
+* file, creating the list when absent. A flow list or an alias is left alone.
+*/
+function mergeOnlyBuiltDependencies(yaml, packages) {
+	if (packages.length === 0) return yaml;
+	const block = /^onlyBuiltDependencies:\s*(?:#.*)?(?:\r?\n|$)/m.exec(yaml);
+	if (!block) {
+		if (/^(?:onlyBuiltDependencies|"onlyBuiltDependencies"|'onlyBuiltDependencies')\s*:/m.test(yaml)) return yaml;
+		const items = packages.map((name) => `  - ${name}`).join("\n");
+		return `${yaml.replace(/\s*$/, "")}\n\n# pnpm 10.5-10.25 read install-script approvals from this list.\nonlyBuiltDependencies:\n${items}\n`;
+	}
+	const start = block.index + block[0].length;
+	const tail = yaml.slice(start);
+	const nextTopLevel = /^(?!\s|#|$)[^\r\n]+/m.exec(tail);
+	const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;
+	const list = yaml.slice(start, end);
+	const listed = new Set([...list.matchAll(/^\s*-\s*["']?([^"'\s#]+)["']?/gm)].map((entry) => entry[1]));
+	const missing = packages.filter((name) => !listed.has(name));
+	if (missing.length === 0) return yaml;
+	const indentation = /^([ \t]*)-/m.exec(list)?.[1] ?? "  ";
+	const additions = missing.map((name) => `${indentation}- ${name}\n`).join("");
+	return `${yaml.slice(0, start)}${additions}${list}${yaml.slice(end)}`;
+}
+/** Add sharp to the workspace `allowBuilds` policy (pnpm 10.26+, 11, 12). */
 function mergePnpmSharpApproval(yaml) {
 	const block = /^allowBuilds:\s*(?:#.*)?(?:\r?\n|$)/m.exec(yaml);
 	if (!block) {
@@ -25,5 +111,5 @@ function mergePnpmSharpApproval(yaml) {
 }
 
 //#endregion
-export { mergePnpmSharpApproval };
+export { getPnpmVersion, isInsideParentPnpmWorkspace, mergeOnlyBuiltDependencies, mergePackageJsonBuildApprovals, mergePnpmSharpApproval, pnpmBuildApprovalLayout };
 //# sourceMappingURL=pnpm-build-approvals.mjs.map

package/esm/generations/pnpm-build-approvals.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-build-approvals.mjs","names":[],"sources":["../../../../../../../core/src/generations/pnpm-build-approvals.ts"],"sourcesContent":["/** Keep pnpm 11 native build approval local to the feature installer. */\nexport function mergePnpmSharpApproval(yaml: string): string {\n  const block = /^allowBuilds:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n  if (!block) {\n    // Do not hand-edit flow YAML: preserving an existing decision is safer\n    // than risking duplicate keys or discarded comments.\n    if (/^(?:allowBuilds|\"allowBuilds\"|'allowBuilds')\\s*:/m.test(yaml)) return yaml;\n    return `${yaml.replace(/\\s*$/, \"\")}\\nallowBuilds:\\n  sharp: true\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const mapping = yaml.slice(start, end);\n  const entry = /^(\\s*)(?:sharp|\"sharp\"|'sharp')\\s*:\\s*([^#\\r\\n]*)(.*)$/m.exec(mapping);\n  if (entry) {\n    const value = entry[2]!.trim();\n    if (value === \"true\" || value === \"false\") return yaml;\n    if (\n      !/^(?:set this to true or false|\"set this to true or false\"|'set this to true or false')$/.test(\n        value,\n      )\n    )\n      return yaml;\n    const comment = entry[3] ?? \"\";\n    const replacement = `${entry[1]}sharp: true${comment.startsWith(\"#\") ? \" \" : \"\"}${comment}`;\n    return `${yaml.slice(0, start)}${mapping.slice(0, entry.index)}${replacement}${mapping.slice(entry.index + entry[0].length)}${yaml.slice(end)}`;\n  }\n  const indentation = /^([ \\t]+)\\S/m.exec(mapping)?.[1] ?? \"  \";\n  return `${yaml.slice(0, start)}${indentation}sharp: true\\n${mapping}${yaml.slice(end)}`;\n}\n"],"mappings":";;AACA,SAAgB,uBAAuB,MAAsB;CAC3D,MAAM,QAAQ,uCAAuC,KAAK,IAAI;CAC9D,IAAI,CAAC,OAAO;EAGV,IAAI,oDAAoD,KAAK,IAAI,GAAG,OAAO;EAC3E,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE;CACrC;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,UAAU,KAAK,MAAM,OAAO,GAAG;CACrC,MAAM,QAAQ,0DAA0D,KAAK,OAAO;CACpF,IAAI,OAAO;EACT,MAAM,QAAQ,MAAM,EAAE,CAAE,KAAK;EAC7B,IAAI,UAAU,UAAU,UAAU,SAAS,OAAO;EAClD,IACE,CAAC,0FAA0F,KACzF,KACF,GAEA,OAAO;EACT,MAAM,UAAU,MAAM,MAAM;EAC5B,MAAM,cAAc,GAAG,MAAM,GAAG,aAAa,QAAQ,WAAW,GAAG,IAAI,MAAM,KAAK;EAClF,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,QAAQ,MAAM,GAAG,MAAM,KAAK,IAAI,cAAc,QAAQ,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,IAAI,KAAK,MAAM,GAAG;CAC9I;CACA,MAAM,cAAc,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM;CACzD,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,eAAe,UAAU,KAAK,MAAM,GAAG;AACtF"}
+{"version":3,"file":"pnpm-build-approvals.mjs","names":[],"sources":["../../../../../../../../packages/core/src/generations/pnpm-build-approvals.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/**\n * Where a pnpm version reads install-script approvals from (measured with real\n * installs for create-warlock 5.30.0; the scaffold applies the same rule):\n *\n * - `packageJson`: pnpm 7–9 and 10.0–10.4 reject a `pnpm-workspace.yaml`\n *   without `packages:` (\"packages field missing or empty\"), and adding\n *   `packages: [\".\"]` breaks every later `pnpm add` (ERR_PNPM_ADDING_TO_ROOT).\n *   Approvals go under `pnpm.onlyBuiltDependencies` in package.json and no\n *   workspace file is created.\n * - `onlyBuiltDependencies`: pnpm 10.5–10.25 accept a settings-only workspace\n *   file but ignore `allowBuilds`; they read `onlyBuiltDependencies` from it.\n * - `allowBuilds`: pnpm 10.26 and later. An unknown version gets this layout.\n */\nexport type PnpmBuildApprovalLayout = \"packageJson\" | \"onlyBuiltDependencies\" | \"allowBuilds\";\n\nexport function pnpmBuildApprovalLayout(version: string | undefined): PnpmBuildApprovalLayout {\n  const match = /^(\\d+)\\.(\\d+)\\./.exec(version?.trim() ?? \"\");\n\n  if (!match) return \"allowBuilds\";\n\n  const major = Number(match[1]);\n  const minor = Number(match[2]);\n\n  if (major < 10 || (major === 10 && minor < 5)) return \"packageJson\";\n  if (major === 10 && minor < 26) return \"onlyBuiltDependencies\";\n\n  return \"allowBuilds\";\n}\n\n/**\n * The installed pnpm's version, or `undefined` when it cannot be read.\n */\nexport function getPnpmVersion(cwd: string): string | undefined {\n  try {\n    return execFileSync(\"pnpm\", [\"--version\"], {\n      cwd,\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 15_000,\n      shell: process.platform === \"win32\",\n    }).trim();\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * True when a directory ABOVE `projectRoot` holds a `pnpm-workspace.yaml`: the\n * app is a member of a parent workspace, which owns the build-approval policy.\n */\nexport function isInsideParentPnpmWorkspace(projectRoot: string): boolean {\n  let dir = path.dirname(path.resolve(projectRoot));\n\n  while (true) {\n    if (existsSync(path.join(dir, \"pnpm-workspace.yaml\"))) return true;\n\n    const parent = path.dirname(dir);\n\n    if (parent === dir) return false;\n\n    dir = parent;\n  }\n}\n\n/**\n * Add packages to `pnpm.onlyBuiltDependencies` in a parsed package.json,\n * keeping existing entries and their order.\n */\nexport function mergePackageJsonBuildApprovals<T extends Record<string, unknown>>(\n  packageJson: T,\n  packages: readonly string[],\n): T {\n  const pnpm = (packageJson.pnpm ?? {}) as Record<string, unknown>;\n  const current = Array.isArray(pnpm.onlyBuiltDependencies)\n    ? (pnpm.onlyBuiltDependencies as string[])\n    : [];\n  const merged = [...current, ...packages.filter((name) => !current.includes(name))];\n\n  return { ...packageJson, pnpm: { ...pnpm, onlyBuiltDependencies: merged } };\n}\n\n/**\n * Add packages to a block-style `onlyBuiltDependencies:` list in a workspace\n * file, creating the list when absent. A flow list or an alias is left alone.\n */\nexport function mergeOnlyBuiltDependencies(yaml: string, packages: readonly string[]): string {\n  if (packages.length === 0) return yaml;\n\n  const block = /^onlyBuiltDependencies:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n\n  if (!block) {\n    if (\n      /^(?:onlyBuiltDependencies|\"onlyBuiltDependencies\"|'onlyBuiltDependencies')\\s*:/m.test(yaml)\n    ) {\n      return yaml;\n    }\n\n    const items = packages.map((name) => `  - ${name}`).join(\"\\n\");\n\n    return `${yaml.replace(/\\s*$/, \"\")}\\n\\n# pnpm 10.5-10.25 read install-script approvals from this list.\\nonlyBuiltDependencies:\\n${items}\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const list = yaml.slice(start, end);\n  const listed = new Set(\n    [...list.matchAll(/^\\s*-\\s*[\"']?([^\"'\\s#]+)[\"']?/gm)].map((entry) => entry[1]),\n  );\n  const missing = packages.filter((name) => !listed.has(name));\n\n  if (missing.length === 0) return yaml;\n\n  const indentation = /^([ \\t]*)-/m.exec(list)?.[1] ?? \"  \";\n  const additions = missing.map((name) => `${indentation}- ${name}\\n`).join(\"\");\n\n  return `${yaml.slice(0, start)}${additions}${list}${yaml.slice(end)}`;\n}\n\n/** Add sharp to the workspace `allowBuilds` policy (pnpm 10.26+, 11, 12). */\nexport function mergePnpmSharpApproval(yaml: string): string {\n  const block = /^allowBuilds:\\s*(?:#.*)?(?:\\r?\\n|$)/m.exec(yaml);\n  if (!block) {\n    // Do not hand-edit flow YAML: preserving an existing decision is safer\n    // than risking duplicate keys or discarded comments.\n    if (/^(?:allowBuilds|\"allowBuilds\"|'allowBuilds')\\s*:/m.test(yaml)) return yaml;\n    return `${yaml.replace(/\\s*$/, \"\")}\\nallowBuilds:\\n  sharp: true\\n`;\n  }\n\n  const start = block.index + block[0].length;\n  const tail = yaml.slice(start);\n  const nextTopLevel = /^(?!\\s|#|$)[^\\r\\n]+/m.exec(tail);\n  const end = nextTopLevel ? start + nextTopLevel.index : yaml.length;\n  const mapping = yaml.slice(start, end);\n  const entry = /^(\\s*)(?:sharp|\"sharp\"|'sharp')\\s*:\\s*([^#\\r\\n]*)(.*)$/m.exec(mapping);\n  if (entry) {\n    const value = entry[2]!.trim();\n    if (value === \"true\" || value === \"false\") return yaml;\n    if (\n      !/^(?:set this to true or false|\"set this to true or false\"|'set this to true or false')$/.test(\n        value,\n      )\n    )\n      return yaml;\n    const comment = entry[3] ?? \"\";\n    const replacement = `${entry[1]}sharp: true${comment.startsWith(\"#\") ? \" \" : \"\"}${comment}`;\n    return `${yaml.slice(0, start)}${mapping.slice(0, entry.index)}${replacement}${mapping.slice(entry.index + entry[0].length)}${yaml.slice(end)}`;\n  }\n  const indentation = /^([ \\t]+)\\S/m.exec(mapping)?.[1] ?? \"  \";\n  return `${yaml.slice(0, start)}${indentation}sharp: true\\n${mapping}${yaml.slice(end)}`;\n}\n"],"mappings":";;;;;AAmBA,SAAgB,wBAAwB,SAAsD;CAC5F,MAAM,QAAQ,kBAAkB,KAAK,SAAS,KAAK,KAAK,EAAE;CAE1D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,QAAQ,OAAO,MAAM,EAAE;CAC7B,MAAM,QAAQ,OAAO,MAAM,EAAE;CAE7B,IAAI,QAAQ,MAAO,UAAU,MAAM,QAAQ,GAAI,OAAO;CACtD,IAAI,UAAU,MAAM,QAAQ,IAAI,OAAO;CAEvC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,KAAiC;CAC9D,IAAI;EACF,OAAO,aAAa,QAAQ,CAAC,WAAW,GAAG;GACzC;GACA,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,OAAO,QAAQ,aAAa;EAC9B,CAAC,CAAC,CAAC,KAAK;CACV,QAAQ;EACN;CACF;AACF;;;;;AAMA,SAAgB,4BAA4B,aAA8B;CACxE,IAAI,MAAM,KAAK,QAAQ,KAAK,QAAQ,WAAW,CAAC;CAEhD,OAAO,MAAM;EACX,IAAI,WAAW,KAAK,KAAK,KAAK,qBAAqB,CAAC,GAAG,OAAO;EAE9D,MAAM,SAAS,KAAK,QAAQ,GAAG;EAE/B,IAAI,WAAW,KAAK,OAAO;EAE3B,MAAM;CACR;AACF;;;;;AAMA,SAAgB,+BACd,aACA,UACG;CACH,MAAM,OAAQ,YAAY,QAAQ,CAAC;CACnC,MAAM,UAAU,MAAM,QAAQ,KAAK,qBAAqB,IACnD,KAAK,wBACN,CAAC;CACL,MAAM,SAAS,CAAC,GAAG,SAAS,GAAG,SAAS,QAAQ,SAAS,CAAC,QAAQ,SAAS,IAAI,CAAC,CAAC;CAEjF,OAAO;EAAE,GAAG;EAAa,MAAM;GAAE,GAAG;GAAM,uBAAuB;EAAO;CAAE;AAC5E;;;;;AAMA,SAAgB,2BAA2B,MAAc,UAAqC;CAC5F,IAAI,SAAS,WAAW,GAAG,OAAO;CAElC,MAAM,QAAQ,iDAAiD,KAAK,IAAI;CAExE,IAAI,CAAC,OAAO;EACV,IACE,kFAAkF,KAAK,IAAI,GAE3F,OAAO;EAGT,MAAM,QAAQ,SAAS,KAAK,SAAS,OAAO,MAAM,CAAC,CAAC,KAAK,IAAI;EAE7D,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE,+FAA+F,MAAM;CAC1I;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,OAAO,KAAK,MAAM,OAAO,GAAG;CAClC,MAAM,SAAS,IAAI,IACjB,CAAC,GAAG,KAAK,SAAS,iCAAiC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,EAAE,CAC/E;CACA,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC;CAE3D,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,MAAM,cAAc,cAAc,KAAK,IAAI,CAAC,GAAG,MAAM;CACrD,MAAM,YAAY,QAAQ,KAAK,SAAS,GAAG,YAAY,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;CAE5E,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,OAAO,KAAK,MAAM,GAAG;AACpE;;AAGA,SAAgB,uBAAuB,MAAsB;CAC3D,MAAM,QAAQ,uCAAuC,KAAK,IAAI;CAC9D,IAAI,CAAC,OAAO;EAGV,IAAI,oDAAoD,KAAK,IAAI,GAAG,OAAO;EAC3E,OAAO,GAAG,KAAK,QAAQ,QAAQ,EAAE,EAAE;CACrC;CAEA,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACrC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,MAAM,eAAe,uBAAuB,KAAK,IAAI;CACrD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,KAAK;CAC7D,MAAM,UAAU,KAAK,MAAM,OAAO,GAAG;CACrC,MAAM,QAAQ,0DAA0D,KAAK,OAAO;CACpF,IAAI,OAAO;EACT,MAAM,QAAQ,MAAM,EAAE,CAAE,KAAK;EAC7B,IAAI,UAAU,UAAU,UAAU,SAAS,OAAO;EAClD,IACE,CAAC,0FAA0F,KACzF,KACF,GAEA,OAAO;EACT,MAAM,UAAU,MAAM,MAAM;EAC5B,MAAM,cAAc,GAAG,MAAM,GAAG,aAAa,QAAQ,WAAW,GAAG,IAAI,MAAM,KAAK;EAClF,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,QAAQ,MAAM,GAAG,MAAM,KAAK,IAAI,cAAc,QAAQ,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,IAAI,KAAK,MAAM,GAAG;CAC9I;CACA,MAAM,cAAc,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM;CACzD,OAAO,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,YAAY,eAAe,UAAU,KAAK,MAAM,GAAG;AACtF"}